Key Management Service - Githubissues

openwallet-foundation / architecture-sig

This special interest group (SIG) is focused on conversations related to the architecture of digital wallet engines and is a sub-group reporting to the OpenWallet Foundation's Technical Advisory Committee.

Creative Commons Attribution 4.0 International

45 stars 16 forks source link

Key Management Service #19

Open thomas-tran opened 2 years ago

thomas-tran commented 2 years ago

@OR13 In the key management service diagram, would you mind adding the some features to it

Key alias (tag): This will help the holder or admin in enterprise to organise/search the key easily
Key type: sign | encryption | authentication
Master key: The master key will be used to generate or encrypt other keys that are in turn used to encrypt the actual data the users want to protect.

OR13 commented 2 years ago

https://github.com/openwallet-foundation/architecture-task-force/pull/27

^ added tagging / description.

key_ops is the standard way of expressing "purpose":

https://datatracker.ietf.org/doc/html/rfc7517#section-4.3

I don't think "master key' belongs in the KMS layer... but maybe I don't understand the standard you are trying to build on wrt that.