sops
sops copied to clipboard
feat(gcpkms): support asymmetric key
Description
Support https://github.com/mozilla/sops/issues/691
Implementation details
- Get key metadata before encryption/decryption
- For check asymmetric or symmetric, they needs to use different APIs
- Asymmetric encryption only encrypt DEK(Data Encryption Key) only
Future improvements
- Record it's symmetric or asymmetric key to reduce API call when decrypting
Related docs
https://cloud.google.com/kms/docs/encrypt-decrypt-rsa