search

tendermint / tmkms

Key Management service for Tendermint Validator nodes
Apache License 2.0
140 stars 43 forks source link

Feature Request: Vault Integration #92

Closed JoshuaEdwards1991 closed 5 years ago

JoshuaEdwards1991 commented 5 years ago

Hey there,

I was wondering if you will be supporting vault? - https://www.vaultproject.io/

Best, Josh

tarcieri commented 5 years ago

We're presently focusing on HSM-backed Ed25519 signing which, to my knowledge, Vault does not support.

JoshuaEdwards1991 commented 5 years ago

It looks like Ed25519 is supported - https://www.vaultproject.io/docs/secrets/transit/index.html Or am I missing something?

tarcieri commented 5 years ago

Hardware security modules (HSMs) are a requirement for production validators, and while Vault Enterprise has support for them, they don't support using them for Ed25519 signing:

https://www.vaultproject.io/docs/enterprise/hsm/index.html

JoshuaEdwards1991 commented 5 years ago

@tarcieri Hey Tony, another question on this one - would this new offering by IBM work? https://www.ibm.com/blogs/bluemix/2018/12/ibm-cloud-hyper-protect-crypto-services-key-management-service-update/

tarcieri commented 5 years ago

I don't know. That page doesn't list the supported algorithms.

The one and only algorithm required is Ed25519 (in a hardware-backed solution).