Namespace Nops.Core.Keys
Classes
- AgeIdentityLoader
Loads age private key identities from either a Bech32 key string ("AGE-SECRET-KEY-...") or a path to a file that contains one or more such keys (for example an
age-keygenoutput file, comments are ignored).
- AgeMasterKey
Master key provider for age (age-encryption.org/v1) keys. Decrypts X25519 recipients (what sops uses to wrap its data key); passphrase, post-quantum and plugin recipients are not supported.
- AwsKmsMasterKey
Master key provider for AWS KMS keys used by SOPS. Wraps AWSSDK.KMS Decrypt to unwrap the encrypted data key share.
- AzkvMasterKey
Master key provider for Azure Key Vault keys used by SOPS. Uses Azure.Security.KeyVault.Keys to unwrap the encrypted data key share.
- GcpKmsMasterKey
Master key provider for Google Cloud KMS keys used by SOPS. Uses Google.Cloud.Kms.V1 to decrypt the encrypted data key share.
- PgpMasterKey
Master key provider for PGP (OpenPGP) keys. Uses BouncyCastle OpenPGP to decrypt session keys.
- VaultTransitMasterKey
Master key provider for HashiCorp Vault Transit secrets engine. Uses the Vault HTTP API to decrypt the encrypted data key share.
Interfaces
- IMasterKeyProvider
Interface for master key providers (age, PGP, KMS, etc.). Each provider knows how to decrypt the data key share encrypted under its key.