Protecting Encryption Keys with Azure Key Vault

on YouTube ↗59m

" summary

Step-by-step demo of Azure Key Vault: creates keys and secrets, calls AzureAD for app auth, and runs code that encrypts/decrypts, signs and verifies, and shows local key wrapping with an AES session key protected by an HSM-backed RSA key. Shows costs (≈$0.03/10k ops, premium keys ≈$1/key), explains that a key never comes out of the vault, recommends separate vaults per environment, covers secret versioning, HMAC+PBKDF password hardening, and links to MIT‑licensed GitHub code.

AI-written summary · about

" chapters (14)

1. 0:00Intro
2. 3:39Don't Just Focus on Perimeter Security
3. 12:18Tamper proof Central key repository Can also store Certs (Private Keys)
4. 16:19Once a key goes in the Key Vault, it never comes out again
5. 17:43Keys vs Secrets
6. 22:57Configuration as Secrets
7. 25:14Local Key Wrapping
8. 31:19Insurers Pll data encrypted using their own keys
9. 33:57Key Versioning
10. 35:39Password Protection
11. 37:29Salted Hash Passwords
12. 46:25Good practice to use different HMAC / Vault Keys for different roles, it Admin, internal employee, customers etc.
13. 47:47A digital is a mathematical technique used to validate the authenticity and integrity of a message, software or digital document
14. 53:11Data Breaches are Inevitable

" related talks

• 01h 03mProtecting Encryption Keys with Azure Key VaultStephen Haunts · NDC Copenhagen 2019
• 56mProtecting Encryption Keys with Azure Key VaultStephen Haunts · NDC Security Oslo 2019
• 57mProtecting Encryption Keys with Azure Key VaultStephen Haunts · NDC Minnesota 2018
• 10mCan you keep it a secret?Lars Kristian Hagen · NDC Oslo 2017
• 20mAzure Authentication With VaultNed Bellavance · HashiTalks 2019
• 47mManaging your Secrets in a Cloud EnvironmentTaswar Bhatti · Update Conference Prague 2018
• 22mSecure your secrets with automationAndrea Giunta · SREday London 2022
• 43mSecure DevelopmentGenri Bin · DevOps Pro Moscow 2019