shieldworks / aegis

Aegis: Keep Your Secrets… Secret
https://vsecm.com
MIT License
31 stars 3 forks source link

Add sentinel the ability to randomly generate key for the "manual insertion" mode. — Sentinel shall require a public key, and encrypt the response with that public key before delivering it (for added security) — the owner of the private key then can decrypt the result — we can also write a helper binary for that #473

Open v0lkan opened 1 year ago

v0lkan commented 1 year ago

The "encrypt with public key" is a by-product of one of our design decisions:

The second design decision is the fact that sentinel is the only interaction point for the Operator. The Operator cannot directly talk to Aegis Safe.