Feedemy.KeyManagement.Providers.Npgsql 3.3.1

Feedemy.KeyManagement

Enterprise-grade key management library for .NET applications.

Features

• Automatic Key Rotation - Background service with configurable intervals
• Versioned Encryption - Auto-decryption with version detection
• Asymmetric Keys - RSA (2048/3072/4096) and ECDSA (P-256/P-384/P-521)
• Multi-Platform Storage - Windows DPAPI, Linux Keyring, Azure Key Vault
• Distributed Caching - Redis with pub/sub invalidation
• Database Persistence - SQL Server, PostgreSQL, and SQLite
• Health Monitoring - ASP.NET Core health checks
• Fallback Storage - Multi-provider redundancy
• Audit Trail - Complete compliance logging
• Roslyn Analyzers - 48 compile-time security rules

Installation

dotnet add package Feedemy.KeyManagement

# Persistence (choose one)
dotnet add package Feedemy.KeyManagement.Providers.EntityFramework  # SQL Server
dotnet add package Feedemy.KeyManagement.Providers.Npgsql          # PostgreSQL
dotnet add package Feedemy.KeyManagement.Providers.Sqlite          # SQLite (dev/testing)

# Optional
dotnet add package Feedemy.KeyManagement.Analyzers

Upgrading to 3.3.1? The Redis integration now builds on StackExchange.Redis 3.x (up from 2.x). If your application also references StackExchange.Redis directly, taking 3.3.1 pulls the v3 major into your dependency graph — pin the version explicitly if you are not ready for it. Full details in the CHANGELOG.

Quick Start

Development Setup

using Feedemy.KeyManagement.Extensions;

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddKeyManagement(options =>
{
    options.EnableAutoRotation = true;
    options.RotationCheckInterval = TimeSpan.FromHours(6);
    options.DefaultRotationDays = 90;
});

var app = builder.Build();
app.Run();

Production Setup

builder.Services.AddKeyManagement(options =>
{
    options.EnableAutoRotation = true;
    options.RotationCheckInterval = TimeSpan.FromHours(6);

    // Auto-initialization
    options.Initialization.EnableAutoInitialization = true;
    options.Initialization.ExternalKeysJsonPath = "keys.json";
})
.WithAzureKeyStorage("https://your-vault.vault.azure.net/")
.WithRedisCache("localhost:6379")
.WithSqlServerMetadata("Server=localhost;Database=KeyManagement;...");

builder.Services.AddHealthChecks()
    .AddKeyManagementHealthCheck();

Basic Usage

public class MyService
{
    private readonly IKeyManagementService _keyService;
    private readonly IKeyManagementAdminService _adminService;

    // Create a key
    public async Task CreateKeyAsync()
    {
        await _adminService.CreateKeyAsync(new CreateKeyRequest
        {
            KeyName = "MyEncryptionKey",
            AutoGenerate = true,
            KeySize = 32,
            RotationIntervalDays = 90,
            CreatedBy = "Admin"
        });
    }

    // Retrieve a key (cached - sub-millisecond)
    public async Task<byte[]> GetKeyAsync()
    {
        return await _keyService.RetrieveKeyAsync("MyEncryptionKey");
    }

    // Check health
    public async Task<KeyHealthStatus> GetHealthAsync()
    {
        var health = await _keyService.GetKeyHealthAsync("MyEncryptionKey");
        return health.Status;
    }
}

Key Initialization

Define keys in keys.json for auto-generation on first run:

{
  "Keys": [
    {
      "KeyName": "EncryptionKey",
      "KeyType": "Symmetric",
      "RotationIntervalDays": 90,
      "Category": "MasterKey"
    },
    {
      "KeyName": "JwtSigningKey",
      "KeyType": "RSA",
      "KeySize": 2048,
      "RotationIntervalDays": 180,
      "Category": "Signing"
    }
  ]
}

Asymmetric Keys

// Sign data
var signature = await _asymmetricOps.SignAsync(
    "JwtSigningKey",
    data,
    HashAlgorithmName.SHA256);

// Verify signature
var isValid = await _asymmetricOps.VerifyAsync(
    "JwtSigningKey",
    data,
    signature,
    HashAlgorithmName.SHA256);

// Get public key for external use
var publicKeyPem = await _asymmetricOps.GetPublicKeyPemAsync("JwtSigningKey");

Performance

Packages

Documentation

Detailed documentation available in docs/partial/:

• README_CORE.md - API reference
• README_CONFIG.md - Configuration options
• README_STORAGE.md - Storage providers
• README_PERSISTENCE.md - Database setup
• README_CACHE.md - Caching architecture
• README_INIT.md - Initialization guide
• README_BACKGROUND.md - Background services
• README_EXTENSIONS.md - DI setup

License

This project is dual-licensed:

• MIT License - Free for all use cases including commercial
• Commercial License - For enterprise support, SLA, and priority features

Commercial inquiries: licensing@feedemy.com

Support

• GitHub Issues
• GitHub Discussions

Copyright (c) 2025 Feedemy