by horeszko on 5/15/24, 11:48 PM with 0 comments
I built a cryptographic network service (CNS) to serve as a key vault. The idea is to deploy this on a dedicated host to effectively create a hardware security module (HSM) but one that communicates through an HTTPS REST API and can be extended to execute any cryptographic operation.
Features:
- Password hashing using Argon2id and signing JWTs with HS256. More cryptographic operations can be easily added as needed.
- Password hashing and JWT signing over HTTPS. Keys never leave the vault. - Multiple clients (i.e. users of the keys in the key vault) with one or more keys.
- An admin CLI for key management tasks.
CNS is the first step in a larger project of mine to run my own "data center" from home and to self-host as much of my own software as possible.