Encryption HashiCorp Vault项目-支持的加密算法

具有以下特点：

数据加密：Vault可以加密和解密数据，而无需存储 信息技术这允许安全团队定义加密参数和 开发人员将加密数据存储在SQL之类的位置，而无需 必须设计自己的加密方法

:

transit secret后端处理数据的加密函数 在运输途中。Vault不存储发送到后端的数据。它可以 也可以被视为“加密即服务”

它是否支持使用secp192r1曲线的ECDSA

POST/transit/keys/

-创建指定类型的新命名加密密钥，稍后可用于加密/解密或签名/验证。它是否创建私有和公共密钥对？是否有获取/输出公钥的方法

是否可以创建自定义秘密后端，该后端将执行加密操作，但不会返回私钥

答案来自：

目前还没有

    POST /transit/keys/<name> - creates a new named encryption key of the specified type which later can be used for encryption/decryption or signing/verifying. Does it create key pair of private and public? Is there any method to get/output public key?

这正是transit所做的

    POST /transit/keys/<name> - creates a new named encryption key of the specified type which later can be used for encryption/decryption or signing/verifying. Does it create key pair of private and public? Is there any method to get/output public key?

    Is it possible to create custom secret backend which would perform cryptographic operations but would not return private keys?