intel / ehsm

An End-to-End Distributed and Scalable Cloud KMS (Key Management System) built on top of Intel SGX enclave-based HSM (Hardware Security Module), aka eHSM.

Home Page:https://community.intel.com/t5/Blogs/Tech-Innovation/open-intel/An-Intel-SGX-based-Hardware-Security-Module-backed-Key/post/1360130?wapkw=eHSM

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

How to use EHSM to encrypt a secret data? Is there any relevant document?

qihuang0 opened this issue · comments

If I need to enable secret data encryption like KMS,

currently, you can refer to: https://github.com/intel/ehsm/blob/main/test/test_kms_with_cli.py#L111
secret manager with DB storage is under development now. Thanks.

@yang8621 Could Kubernetes use eHSM as a KMS provider to encrypt secret data?

Yes, of course. Common restful interfaces are provided to use.