Files
git.stella-ops.org/docs/features/unchecked/smremote/sm-remote-crypto-service.md

1.4 KiB

SM Remote Crypto Service

Module

SmRemote

Status

IMPLEMENTED

Description

Dedicated remote service for Chinese SM2/SM3/SM4 cryptographic operations, running as an independent microservice.

Implementation Details

  • Service Entry Point: src/SmRemote/StellaOps.SmRemote.Service/Program.cs -- ASP.NET Core minimal API web service hosting SM2/SM3/SM4 cryptographic operation endpoints. Runs as an independent microservice that can be deployed in environments requiring Chinese national cryptography standards compliance.
  • Docker Compose: devops/compose/docker-compose.sm-remote.yml -- Docker Compose configuration for deploying the SM Remote service alongside the main platform.

E2E Test Plan

  • Start the SM Remote service and verify it responds to health check requests
  • Submit an SM3 hash request with known test input and verify the output matches the expected SM3 digest
  • Submit an SM2 signing request and verify the returned signature can be validated with the corresponding SM2 public key
  • Submit an SM4 encryption request, then decrypt the ciphertext, and verify the round-trip produces the original plaintext
  • Verify the service runs independently: start only the SM Remote service (without the main platform) and confirm it accepts cryptographic operation requests
  • Deploy the service using docker-compose.sm-remote.yml and verify it starts and passes health checks in the containerized environment