Alok Menghrajani

Previously: security engineer at Square, co-author of HackLang, put the 's' in https at Facebook. Maker of CTFs.


This blog does not use any tracking cookies and does not serve any ads. Enjoy your anonymity; I have no idea who you are, where you came from, and where you are headed to. Let's dream of an Internet from times past.


Home | Contact me | Github | RSS feed | Consulting services | Tools & games

Open sourcing Keywhiz: Protecting infrastructure secrets

tags: keywhiz | open source

We recently open sourced Keywhiz, a piece of infrastructure to manage and distribute secrets across services.

A really neat thing about Keywhiz is that the client API uses FUSE. FUSE makes it easy to manage files which contain secrets (think database, web server configs or API keys) without having to actually persist the data on disks.

In addition, the code has been battle tested for over 3+ years of use at scale.

The server is written in Java and the client filesystem is written in Go.

Links