kms

0.1.0

Key management service with embedded OTP runtime, optional HTTP API, SQLite/PostgreSQL storage, and external RMK providers

HexDocs Report package

Current section

Files

Jump to

Documentation 1 Version 9 Dependencies Dependants Files Activity

kms docs security.md

Raw

docs/security.md

# Security

KMS can run as an in-process library or as an HTTP service. Security posture depends on deployment configuration.

Start here:

- [Overview](overview.md)
- [Security stance](security/stance.md)
- [Operations](operations.md)
- [Local vs remote KMS](local-vs-remote.md)
- [Authorization and bindings](authz-bindings.md)
- [Sessions](sessions.md)
- [Authentication factors](factors.md)
- [Additional authenticated data](aad.md)
- [Root master keys](rmk.md)
- [Fallback recovery](fallback-recovery.md)
- [Crash dumps](security/crash-dumps.md)

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT