Crypt does not support encrypting long secrets (more than ~500 bytes) with Azure KeyVault

[myhau]

Crypt does not support encrypting long secrets (more than ~500 bytes) with Azure KeyVault

[antoniaklja]

Thanks @myhau for raising this issue. It looks like when using RSA (RSAOAEP256 by default) the amount of data you can encrypt is dependent on the size of the key you are using:

((KeySize - 384) / 8) + 7

RSA Encryption, getting bad length

We'll have a look at potential solutions and keep you informed.

[antoniaklja]

I'm afraid encryption of large payloads it's not natively supported by Azure Key Vault, as asymmetric encryption is used for small payloads only. We have verified if either symmetric encryption or chunking is possible.

The ENCRYPT operation encrypts an arbitrary sequence of bytes using an encryption key that is stored in Azure Key Vault. Note that the ENCRYPT operation only supports a single block of data, the size of which is dependent on the target key and the encryption algorithm to be used.

encrypt - encrypt