38 lines
2.8 KiB
Text
38 lines
2.8 KiB
Text
|
# SecretumVault page — Post-Quantum Secrets Vault
|
||
|
|
|
||
|
|
# Hero
|
||
|
|
secretumvault-badge = PQC Production-Ready | Rust 1.75+ | Cedar ABAC | 50+ Tests
|
||
|
|
secretumvault-tagline = Post-Quantum Cryptographic Secrets Vault
|
||
|
|
secretumvault-page-title = Post-Quantum Secrets Vault for Modern Infrastructure
|
||
|
|
secretumvault-page-subtitle = Production-ready ML-KEM-768 + ML-DSA-65 with Cedar policy authorization, pluggable crypto backends, and multi-cloud storage. Deploy post-quantum cryptography today. One config line to enable PQC. No code changes.
|
||
|
|
|
||
|
|
# Why
|
||
|
|
secretumvault-why-title = Why SecretumVault
|
||
|
|
secretumvault-problem-title = The Problem
|
||
|
|
secretumvault-problem-desc = Current encryption will be broken by quantum computers. Most secret vaults have no PQC migration path. Cloud KMS vendors lock you in. Policy languages are proprietary and ACL-based.
|
||
|
|
secretumvault-solution-title = The Solution
|
||
|
|
secretumvault-solution-desc = Cryptographic agility through pluggable backends. ML-KEM-768 + ML-DSA-65 work today via OQS. Cedar policies are portable. Multi-cloud storage prevents lock-in. Switch backends via config — no recompilation.
|
||
|
|
|
||
|
|
# Features
|
||
|
|
secretumvault-features-title = Core Capabilities
|
||
|
|
secretumvault-feat-pqc-title = Post-Quantum Cryptography
|
||
|
|
secretumvault-feat-pqc-desc = ML-KEM-768 (FIPS 203) key encapsulation and ML-DSA-65 (FIPS 204) digital signatures via OQS. NIST compliance verified. Hybrid classical+PQC mode in development.
|
||
|
|
secretumvault-feat-engines-title = Secrets Engines
|
||
|
|
secretumvault-feat-engines-desc = KV (versioned), Transit (encryption-as-a-service), PKI (X.509 certificates), Database (dynamic credentials for PostgreSQL, MySQL, MongoDB). Extensible via trait.
|
||
|
|
secretumvault-feat-storage-title = Multi-Backend Storage
|
||
|
|
secretumvault-feat-storage-desc = etcd (distributed HA), SurrealDB (document + graph with MVCC), PostgreSQL (ACID), filesystem (dev/test). Pluggable via StorageBackend trait.
|
||
|
|
secretumvault-feat-cedar-title = Cedar Authorization
|
||
|
|
secretumvault-feat-cedar-desc = AWS Cedar policy language for attribute-based access control. Context-aware decisions: IP allowlisting, time-based access, environment constraints. Policy-as-Code.
|
||
|
|
secretumvault-feat-cloud-title = Cloud-Native
|
||
|
|
secretumvault-feat-cloud-desc = Kubernetes-ready with Helm charts. Docker multi-stage builds (<50MB). Prometheus metrics, structured logging with correlation IDs. NATS event bus for lifecycle notifications.
|
||
|
|
secretumvault-feat-enterprise-title = Enterprise Ready
|
||
|
|
secretumvault-feat-enterprise-desc = TLS/mTLS, Shamir Secret Sharing (2-of-3, 3-of-5), token management with TTL/renewal/revocation, full audit logging for SOC2/GDPR/HIPAA compliance.
|
||
|
|
|
||
|
|
# Tech stack
|
||
|
|
secretumvault-tech-stack-title = Technology Stack
|
||
|
|
|
||
|
|
# CTA
|
||
|
|
secretumvault-cta-title = Deploy post-quantum cryptography today
|
||
|
|
secretumvault-cta-subtitle = Rust-native | Apache 2.0 | Self-Hosted | Multi-Cloud
|
||
|
|
secretumvault-cta-explore = Explore Git Repo
|