GS2-Key API Reference

A service that manages encryption keys.

Create encryption keys for confidential data in GS2 and for signature creation. Since encryption key data cannot be taken out of GS2, it can be processed securely.

In GS2-Key, encryption keys are created and managed under a namespace.

Microservices that handle sensitive data internally, such as GS2-Account’s password signing or GS2-Auth’s token issuance, use keys managed by GS2-Key. By specifying a key when creating the namespace of each microservice, it is used for the encryption processing needed within that namespace.

When your application handles sensitive information independently, you can also directly call the GS2-Key Encrypt / Decrypt APIs to perform encryption and decryption. This achieves server-side encryption without embedding the secret key in the application.