8000 Use KMS for crypto operations in Blend crates · Issue #1394 · logos-co/nomos · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Use KMS for crypto operations in Blend crates #1394
@youngjoon-lee

Description

@youngjoon-lee

The following crates perform several crypto operations.

  • nomos-blend: Key derivations (spec)
  • nomos-blend-message: Encapsulation/Decapsulation (spec)

Currently, those crypto operations are implemented in the nomos-blend-message::crypto module.

It works well, but it would be awesome if we integrate the capability of our existing KMS service, which manages all keys in one place and provides abstracted crypto operations.

First of all, we need to check if the API of the existing KMS service is sufficient for dealing with all operations required by the Blend crates. We don't want to update the API as much as possible, but if inevitable, we may need to update some.

Another point to mention is that we're talking about using the capability of KMS service from the core crates that basically don't have access to the service layer.
We may need to define a trait that acts similar as a bridge between core crates and the KMS service. There might be some challenging points since the trait may have async operations.

If this work is successful, we can adopt this practice to other protocols such as cryptarchia, or so.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0