Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ingest] Support multiple encryption keys #787

Open
nanjiangshu opened this issue Apr 3, 2024 · 1 comment
Open

[ingest] Support multiple encryption keys #787

nanjiangshu opened this issue Apr 3, 2024 · 1 comment

Comments

@nanjiangshu
Copy link
Contributor

nanjiangshu commented Apr 3, 2024

Main user story

As a security conscious user of the sensitive data arcive,
I want to see that the archive can rotate encryption keys
so that security can be maintained.

Sub user story

As an sda-dev
I want to implement multiple-key support for the ingest service
so that repository key rotation can be enabled.

Description

  • Ingest should read a directory of private keys instead of just a single file
  • Ingest should try all keys and add correct key hash to database

Acceptance criteria

  • Demonstrate ingestion of encrypted files with two different archive c4gh private keys
  • Tests verifying the changes are added

Extra information

Note: key rotation miro board here

Related issue for the verify service #1087.

@nanjiangshu nanjiangshu added FEGA and removed FEGA labels Apr 3, 2024
@blankdots
Copy link
Contributor

it would be good if this is left flexible/configurable as we do already have a mechanism to do that with https://github.com/CSCfi/c4gh-transit

@viklund viklund changed the title Implement Multiple-Key support for "ingest" and "verify" services [ingest] Support multiple encryption keys Oct 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants