Cloud Agent, ability to rotate master-keys

[elribonazo]

Short Description

Add a mechanism to revoke master key, such as a DID operation.

Value statement

In case the master key associated to a DID leaks or gets compromised, the DID entity has no option to renew its master key. Any attacker with access to the compromised private key can thus perform DID operations on behalf of the associated entity, such as issuing falsified credentials.

Components

Cloud Agent
Castor

Team members

@hyperledger/identus-maintainers

Architect

@hyperledger/identus-maintainers

QA Member

@hyperledger/identus-maintainers

Owner

@hyperledger/identus-maintainers