azure-security-keyvault-keys-dotnet

# Azure.Security.KeyVault.Keys (.NET) Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. ## Installation ```bash dotnet add package Azure.Security.KeyVault.Keys dotnet add package Azure.Identity ``` **Current Version**: 4.7.0 (stable) ## Environment Variables ```bash KEY_VAULT_NAME=<your-key-vault-name> # Or full URI AZURE_KEYVAULT_URL=https://<vault-name>.vault.azure.net ``` ## Client Hierarchy ``` KeyClient (key management) ├── CreateKey / CreateRsaKey / CreateEcKey ├── GetKey / GetKeys ├── UpdateKeyProperties ├── DeleteKey / PurgeDeletedKey ├── BackupKey / RestoreKey └── GetCryptographyClient() → CryptographyClient CryptographyClient (cryptographic operations) ├── Encrypt / Decrypt ├── WrapKey / UnwrapKey ├── Sign / Verify └── SignData / VerifyData KeyResolver (key resolution) └── Resolve(keyId) → CryptographyClient ``` ## Authentication ### DefaultAzureCredential (Recommended) ```csharp using Azure.Identity; using Azure.Security.KeyVault.Keys; var keyVaultName = Environment.GetEnvironmentVariable("KEY_VAULT_NAME"); var kvUri = $"https://{keyVaultName}.vault.azure.net"; var client = new KeyClient(new Uri(kvUri), new DefaultAzureCredential()); ``` ### Service Principal ```csharp var credential = new ClientSecretCredential( tenantId: "<tenant-id>", clientId: "<client-id>", clientSecret: "<client-secret>"); var client = new KeyClient(new Uri(kvUri), credential); ``` ## Key Management ### Create Keys ```csharp //...