Skip to main content
Table of Contents

Class StrataraFileKeyStoreOptions

Namespace
Stratara.Security
Assembly
Stratara.Security.dll

Options for the file-backed key store and master-key provider registered by AddStrataraFileKeyStore.

public sealed class StrataraFileKeyStoreOptions
Inheritance
StrataraFileKeyStoreOptions
Inherited Members
Extension Methods

Fields

SectionName

The configuration section these options bind from by default.

public const string SectionName = "Stratara:KeyStore"

Field Value

string

Properties

MasterKeyBase64

Base64-encoded master key-encryption key (KEK). Must decode to exactly 32 bytes (AES-256) — it is used directly as an AES-GCM key, which accepts only 16/24/32-byte keys. Generate with openssl rand -base64 32 and supply via a secret store, not source control.

public string? MasterKeyBase64 { get; set; }

Property Value

string

StorePath

Path to the JSON file that stores the KEK-wrapped data-encryption keys. Defaults to keystore.json in the current directory.

public string StorePath { get; set; }

Property Value

string