Event Details

OpenStack continues to mature with an increasing number of security features that have the need to store secrets (e.g., encryption keys). Applying best practices for key management is a critical aspect of security.

In this presentation, we introduce Castellan, a key management interface that takes the pain out of key management. We demonstrate Castellan’s seamless interoperability with Barbican. In the future, Castellan could interface directly with appliances, i.e. those that support the Key Management Interoperability Protocol (KMIP) standard. KMIP is an OASIS standard for key management that is already widely used within industry. By adopting Castellan as a common key management interface, developers are freed from many difficult aspects of implementing key management within OpenStack services and operators are free to choose among Castellan’s supported backends for the actual storage of keys.