seknox / trasa

Zero Trust Service Access

Home Page:https://www.trasa.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[FEATURE] Provision to store tsxVault encryption master key in local storage

flyinghermit opened this issue · comments

Describe the feature:

Currently tsxVault master encryption key is sharded as Shamir secret sharing method. We should also implement a feature that allows administrators the option to not shard the key and store it somewhere locally(maybe file or env var).

Describe why this feature is needed:
Not storing the master encryption key locally is better for security but slows down our dev processes that depend on working with encryption flow.