up

src/__Libraries/StellaOps.Cryptography.Kms/FileKmsOptions.cs

@@ -0,0 +1,27 @@
+namespace StellaOps.Cryptography.Kms;
+
+/// <summary>
+/// Options for the <see cref="FileKmsClient"/>.
+/// </summary>
+public sealed class FileKmsOptions
+{
+    /// <summary>
+    /// Root directory for storing key material.
+    /// </summary>
+    public string RootPath { get; set; } = string.Empty;
+
+    /// <summary>
+    /// Password used to encrypt private key material at rest.
+    /// </summary>
+    public required string Password { get; set; }
+
+    /// <summary>
+    /// Signing algorithm identifier (default ED25519).
+    /// </summary>
+    public string Algorithm { get; set; } = KmsAlgorithms.Es256;
+
+    /// <summary>
+    /// PBKDF2 iteration count for envelope encryption.
+    /// </summary>
+    public int KeyDerivationIterations { get; set; } = 100_000;
+}