Skip to content

Vanishing Keys is the public implementation of how Authress provides One Time Secrets

License

Notifications You must be signed in to change notification settings

Authress-Engineering/vanishing-keys

Repository files navigation

Authress media banner

Authress Vanishing Keys

This is the public completely open source implementation of how Authress provides the Vanishing Keys service.

Authress Vanishing Keys is deployed to the Authress Management Portal and is available for everyone to use for free.

To send a secret to someone, just click below.

Everything is open source, and please validate that the passphrase and decrypted secret never leave your browser.

Click Create a Secret to immediately share a secret using the free community version of the Authress Vanishing Keys service.

Authress Vanish picture

How it works

  • Enter your secret at Authress Vanishing Keys
  • Vanish encrypts your secret on the UI side using a passphrase.
  • The encrypted data is sent to Vanish service
  • Share the generated link with the intended party
  • They use the shared passphrase to decrypt the secret

One time use

  • Once the encrypted data is fetched it is immediately deleted from Authress Vanish. This prevent future Quantum attacks against your credentials.
  • Since only the encrypted data is sent to Authress Vanish, no one running the service can decrypt the data even if they wanted to. At no point is the data available

image

Components

Vanish is broken down into two parts: