What problem does it solve?
This Skill addresses the critical need to protect sensitive data within ASP.NET Core applications, ensuring compliance and user privacy through robust encryption, secure key management, and time-limited data handling.
Core Features & Use Cases
- Data Encryption: Encrypts sensitive data at rest (e.g., in databases) and in transit.
- Key Management: Provides patterns for secure key storage, rotation, and protection across various environments (file system, Azure Blob Storage, Azure Key Vault, Redis).
- Time-Limited Tokens: Generates and validates tokens with built-in expiration for secure operations like password resets and email confirmations.
- Session Security: Protects sensitive information stored in user sessions.
- Use Case: Securely store credit card numbers in a database by encrypting them using the ASP.NET Core Data Protection API, while only storing the last four digits in plain text for display.
Quick Start
Configure ASP.NET Core Data Protection to persist keys to Azure Blob Storage and protect them with Azure Key Vault.