Overview
What is CryptVault?
Simply put, the CryptVault is a normal vault system.
In other words, a system for sharing information between multiple systems.
In order to prevent the data from being decrypted on the server side, the following procedure is used in the CryptVault.
CryptVault architecture
How can the system grow up?
Each system, application, pipeline, … (from now on called Identities) is connected to the CryptVault by a pre-existing Identity that has sufficient permissions.
This installation includes storing the public keys of the new identity on the CryptVault.
How does the system protect my data?
Each time a secret is encrypted, it is encrypted individually for each identity that has the necessary rights.
As this encryption takes place on the client that creates the secret, the CryptVault never has access to the secret.
Example scenario
An example scenario of a high-level secret exchange between two systems:
And will answer the questions:
- How do new identities get access to the Vault?
- How do you get access to secrets?
