Matthew Meszaros a8fa4386d5 infra(kms): pluggable Provider interface + local AES-256-GCM impl ...

Define kms.Provider so the cipher service can swap between AWS KMS and
a self-hostable local-key path. Local impl uses AES-256-GCM with the
master key sourced from KMS_LOCAL_MASTER_KEY (base64) or KMS_LOCAL_MASTER_KEY_FILE.
Factory FromEnv selects at boot via KMS_PROVIDER; defaults to aws for
backwards compatibility.

Ciphertext blob format is opaque: switching providers requires a DEK
migration because each provider can only decrypt its own blobs.

10 tests cover round-trip, tamper detection, nil-key rejection, and
factory env-selection paths.

2026-05-27 14:40:56 +00:00

..

decryption.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

encryption.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

factory_test.go

infra(kms): pluggable Provider interface + local AES-256-GCM impl

2026-05-27 14:40:56 +00:00

factory.go

infra(kms): pluggable Provider interface + local AES-256-GCM impl

2026-05-27 14:40:56 +00:00

kms.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

local_test.go

infra(kms): pluggable Provider interface + local AES-256-GCM impl

2026-05-27 14:40:56 +00:00

local.go

infra(kms): pluggable Provider interface + local AES-256-GCM impl

2026-05-27 14:40:56 +00:00

provider.go

infra(kms): pluggable Provider interface + local AES-256-GCM impl

2026-05-27 14:40:56 +00:00