A service for handling secrets to 12-factor apps
Armin Friedl
b39a3ef1ac
- secsrv handling out secrets - secsrv-companion helping in generating input - secsrv-client retrieving secrets Signed-off-by: Armin Friedl <dev@friedl.net> |
||
---|---|---|
secsrv | ||
secsrv-client | ||
secsrv-companion | ||
.gitignore | ||
Cargo.lock | ||
Cargo.toml | ||
README.md |
SecServ
The simple secret service
Protocol
Alice (secret service): keypair (apk, ask) Bob (client): keypair (bpk, bsk)
KEY {id: string, keyid: string, nonce: b64, tag: signature} // alice checks access rights of id for keyid EKY {nonce1:b64, enc(key, nonce:64, bpk), tag: signature}