Secure key and secrets management
The Vault service offers state-of-the-art key management with a focus on providing advanced privacy and messaging capabilities (i.e., zero-knowledge proofs, SNARK-friendly hash functions, double-ratchet algorithm, etc.) in a single enterprise-grade API.
This section describes the elliptic curves and key specifications which are currently supported by the API. Supported curves and key specs are defined with a
typeof either or
symmetrickeys support key derivation (i.e., such as the
ChaCha20stream cipher). Other key specs, such as RSA, are provided for convenience and to achieve table-stakes feature-parity with industry-standard key management solutions such as AWS Key Management Service, Azure Key Vault, Hashicorp Vault, etc.