Skip to content
Snippets Groups Projects
user avatar
Thai Duong authored
- Directory structure follows TensorFlow.
- Rules for protobuf building are based on https://github.com/pubref/rules_protobuf, as I can't find anything simpler.
- Continuous integration with Kokoro (work in progress).

I also copied some existing Java/CC code from Bartosz and Daniel's experimental folders.

Change-Id: I7f993934d149c114320e3388fee84fbdafd7ba81
433c7b23
Name Last commit Last update
cc
java
proto
.gitignore
README.md
WORKSPACE

Cloud Crypto SDK

An open-source SDK that provides cloud customers with cryptographic functionalities needed to extend key management offering of Cloud KMS.

In particular, Cloud KMS needs support for “Envelope Encryption”, i.e., a client-side encryption of data with user-generated keys protected by KMS encryption: cloud user generates a data encryption key (DEK) locally, encrypts data with DEK, sends DEK to Storky to be encrypted (with a key managed by Storky), and stores encrypted DEK with encrypted data; at a later point user can retrieve encrypted data and DEK, use Storky to decrypt DEK, and use decrypted DEK to decrypt the data. A guiding principles for the design of the SDK are security, simplicity, and resistance to user errors.