azure

Documentation

Overview

Package azure implements KMS backends for Azure Key Vault and Azure managed HSM.

Index

• type KMSClient
  • func New(ctx context.Context, store kms.Storage, cfg uri.AzureConfig) (*KMSClient, error)
  • func (c *KMSClient) Close()
  • func (c *KMSClient) GetDEK(ctx context.Context, keyID string, dekSize int) ([]byte, error)

Types

type KMSClient

type KMSClient struct {
	// contains filtered or unexported fields
}

KMSClient implements the CloudKMS interface for Azure Key Vault.

func New

func New(ctx context.Context, store kms.Storage, cfg uri.AzureConfig) (*KMSClient, error)

New initializes a KMS client for Azure Key Vault.

func (*KMSClient) Close

func (c *KMSClient) Close()

Close is a no-op for Azure.

func (*KMSClient) GetDEK

func (c *KMSClient) GetDEK(ctx context.Context, keyID string, dekSize int) ([]byte, error)

GetDEK fetches an encrypted Data Encryption Key from storage and decrypts it using a KEK stored in Azure Key Vault.