mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-03-03 20:29:27 -05:00

Encrypt each object with a random DEK and attach the encrypted DEK as object metadata. Encrpt the DEK with a key from the keyservice. All objects use the same KEK until a keyrotation takes place.