https://pulumi.com logo
Title
e

enough-truck-34175

05/03/2021, 6:54 PM
Does anyone know what ciphers Pulumi uses for encryption? I need to info for a security review.
g

gentle-diamond-70147

05/03/2021, 7:00 PM
If you're asking regarding the open source project, then this depends on the configured secret provider - https://www.pulumi.com/docs/intro/concepts/secrets/#available-encryption-providers. As an example, for AWS KMS uses the Advanced Encryption Standard (AES) algorithm in Galois/Counter Mode (GCM) with 256-bit secret keys.
For the Pulumi SaaS, AES 256-bit is used (backed by AWS KMS). Would be happy to help with your security review if you contact us at support@pulumi.com.
👍 1
e

enough-truck-34175

05/03/2021, 7:14 PM
Thanks! That answers it for me perfectly!
👍 1