Skip to main content
Table of Contents

Interface IMasterKeyProvider

Namespace
Stratara.Abstractions.Security
Assembly
Stratara.Abstractions.dll

Supplies the master key-encryption key (KEK) used to wrap and unwrap the data-encryption keys (DEKs) held by an IKeyStore. This is the custody seam: the default file-backed provider can later be swapped for an HSM / KMS / vault provider without changing IKeyStore or the stored (wrapped) DEK data.

public interface IMasterKeyProvider
Extension Methods

Methods

GetMasterKeyAsync(CancellationToken)

Return the master KEK bytes used to wrap/unwrap DEKs.

ValueTask<ReadOnlyMemory<byte>> GetMasterKeyAsync(CancellationToken cancellationToken = default)

Parameters

cancellationToken CancellationToken

Propagated to the underlying provider.

Returns

ValueTask<ReadOnlyMemory<byte>>

The KEK bytes (at least 32 bytes for AES-256).