Class StrataraFileKeyStoreOptions
Options for the file-backed key store and master-key provider registered by
AddStrataraFileKeyStore.
public sealed class StrataraFileKeyStoreOptions
- Inheritance
-
StrataraFileKeyStoreOptions
- Inherited Members
- Extension Methods
Fields
SectionName
The configuration section these options bind from by default.
public const string SectionName = "Stratara:KeyStore"
Field Value
Properties
MasterKeyBase64
Base64-encoded master key-encryption key (KEK). Must decode to exactly 32 bytes (AES-256) —
it is used directly as an AES-GCM key, which accepts only 16/24/32-byte keys.
Generate with openssl rand -base64 32 and supply via a secret store, not source control.
public string? MasterKeyBase64 { get; set; }
Property Value
StorePath
Path to the JSON file that stores the KEK-wrapped data-encryption keys. Defaults to
keystore.json in the current directory.
public string StorePath { get; set; }