Keyhouse - Production-ready Key Management Service in Rust

Explore a conference talk on Keyhouse, a production-ready key management service built in Rust. Discover how ByteDance's security team developed this unique open-source solution, leveraging Spire for mutual trust establishment. Learn about its efficient design, utilizing less memory and CPU cores compared to its Go predecessor. Delve into the system's architecture, including cache infrastructure, Spiffy integration, key hierarchy, and authorization mechanisms. Gain insights into the advantages of using Rust for security-critical systems and the potential impact on building a memory-safe world. Understand the next steps for this innovative project, soon to be available on GitHub.

Introduction
Keyhouse
Design considerations
Cache infrastructure
Spiffy
How does Keyhouse useSpiffy
Keyhouse key hierarchy
Keyhouse master key
Keyhouse intermediate key
Customer keys
Data keys
Secrets
Key Rings
Keyhouse Authorization
Next Steps