#key #tuf #kms #repository

tough-kms

Implements AWS KMS as a key source for TUF signing keys

21 releases (11 breaking)

new 0.12.0 Mar 27, 2025
0.11.0 Oct 10, 2024
0.10.0 Sep 4, 2024
0.9.0 Mar 15, 2024
0.1.1 Nov 11, 2020

#1312 in Cryptography

Download history 35/week @ 2024-11-29 47/week @ 2024-12-06 19/week @ 2024-12-13 38/week @ 2024-12-20 4/week @ 2024-12-27 21/week @ 2025-01-03 6/week @ 2025-01-10 19/week @ 2025-01-17 31/week @ 2025-01-24 17/week @ 2025-01-31 47/week @ 2025-02-07 31/week @ 2025-02-14 269/week @ 2025-02-21 219/week @ 2025-02-28 126/week @ 2025-03-07 35/week @ 2025-03-14

658 downloads per month
Used in tuftool

MIT/Apache

345KB
7K SLoC

tough-kms implements the KeySource trait found in tough, a Rust TUF client. By implementing this trait, AWS KMS can become a source of keys used to sign a TUF repository.


lib.rs:

tough-kms implements the KeySource trait found in tough, a Rust TUF client.

By implementing this trait, AWS KMS can become a source of keys used to sign a TUF repository.

Testing

Unit tests are run in the usual manner: cargo test.

Dependencies

~114MB
~2.5M SLoC