C
C#3mo ago
Core

Are there other options for storing keys other than Azure Key Vault?

Hello, Azure Key Vault is the best option for storing RSA keys, but even I cannot access the private RSA key with the SDK. I need to sign JWTs, which are done regularly, by using the sign API exposed by the vault. This would be costly, as JWTs are signed regularly. Current scenario: 1. Generate 2 RSA keys: A and B 2. B is stored in Azure Vault and is only used to encrypt key A 3. The encrypted A key should be stored in a safer place than the database (because the private part of the key is needed too) Are there slightly better than the database for storing this RSA key?
5 Replies
Sossenbinder
Sossenbinder3mo ago
Would using a certificate work? For that one you could get the private key
Core
Core3mo ago
Probably, I will check it out, thanks!
Unknown User
Unknown User3mo ago
Message Not Public
Sign In & Join Server To View
Core
Core3mo ago
Hi, this is very to the one I asked yesterday. I checked the blog post. That is what I do not want to use, it uses the sign API, which I want to avoid
Unknown User
Unknown User3mo ago
Message Not Public
Sign In & Join Server To View