... managing access to your encryption keys

... easily managing access to your encryption keys

Usually several Users or Administrators have to share some Encryption Keys.  Along with it these keys will be stored in files, maybe encrypted, and spreaded over the organisation. Every control to this keys will be lost.

KeyManagerRSA maintains the access to the Encryption Key using user-specific X509-Certificates (RSA-Encryption).

For this purpose an AES-Key will be generated and then encrypted with the RSA PublicKey of a selected X509-Certificate. This data will be stored then into a XML-File. As a first X509-Certificate the use of a master certificate is suggested.

Example for the file content (simplified):

<keys>
   <key>
      <subject>User 1 </subject>
      <key>AESKey_encrypted_with_X509-Certificate</key>
   </key>
   <key>
      <subject>User 1+n </subject>
      <key>AESKey_encrypted_with_X509-Certificate</key>
   </key>
</keys>

Now the access to the key with several, different certificates (aka Users) can be maintained with KeyManagerRSA.

To grant access to a new User, an export of its certifcate, containing the public key part only, is needed. The private part of the certificate will always remain with the user. 

For using the key in different applications there will be several plugins and mechanisms available in the future. Two plugins for the password manager KeePass are already available (see "KeePass Plugins" in Menu)

The software presented here is freely available for private use under the GNU Public License (see here).

The commercial use of the software, of parts or the whole source code, or similar is only allowed with permission of the author. Permission is usually granted after explanation and extent of the intended use and an appropriate donation to the author or to non-profit projects.

In general :

• A non-commercial use is free of charge (GNU-Public-License).
• For commercial use permission is required (see above).
• A separation of application and source code (if available) is not allowed.
• Removal of copyright notices is not allowed.
• Further restrictive copyright notices may be within the application or source code.

By downloading the application or source code, you are deemed to have accepted the above terms and conditions.

Version 0.1
 - initial Version

Version 0.2
 - Added file-extension *.kmx for KeePass-Plugin to Selections