Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KAS RSA keys should be deprecated in favor of EC keys in the spec #11

Open
bleggett opened this issue Dec 1, 2022 · 0 comments
Open
Labels
enhancement New feature or request

Comments

@bleggett
Copy link
Contributor

bleggett commented Dec 1, 2022

  1. Right now, TDF uses an RSA keypair for wrapping.

  2. EC is smaller, faster, and more secure than RSA - TDF should use EC keys, there is no good reason not to.

  3. This would reduce the number of "important keys" in the system that people (and our scripts, and KAS, and hardware modules) have to keep track of.

  4. The biggest practical implementation difference between nanoTDF (which has no public spec) and TDF is the use of EC vs RSA keys - removing this would allow us to simplify our SDK logic, and share more code between the nanoTDF and TDF codepaths, as well as our KAS codepaths.

  5. This would require us to major-version bump the spec, add EC keys, and mark the use of RSA as deprecated - we should not be afraid of doing this.

@bleggett bleggett changed the title RSA keys should be deprecated in favor of EC keys in the spec KAS RSA keys should be deprecated in favor of EC keys in the spec Dec 1, 2022
@strantalis strantalis added the enhancement New feature or request label Feb 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants