Key Vault support for .NET RSA Crypto primitives

Many applications in .NET need an RSA derived object for their crypto functions. Today, there is no built-in way of doing this with keys/certificates stored in Key Vault. I have written an implementation for this, but I believe it belongs in this SDK.

Key Vault does have its own crypto abstractions, but that does not address the need to use Key Vault in places that are not “key vault crypto” aware.

I’m happy to discuss API names, shapes, parameters, but I have this working already here: https://github.com/novotnyllc/RSAKeyVaultProvider

The RSAKeyVault enables you to use secrets and certificates stored in an Azure Key Vault for performing signing and decryption operations. (Encrypt and verify can be done locally with the public key material.) The type derives from RSA so can be used anywhere an AsymmetricAlgorithm can be, including with SignedXml types.

I would like to contribute this as a PR into the Key Vault SDK but wanted to start a discussion here before sending a PR.

[heaths]

Reopening. Apologies for the misunderstanding. I think what would make sense for both performance and cost-savings is to provide a wrapper around CryptographyClient that extends AsymmetricAlgorithm or SymmetricAlgorithm since we support RSA, EC, and - soon - AES.

[heaths]

I’ve removed the help wanted tag since you’re going to work on it. As for milestone, we don’t have any created for February yet, which seems like a likely candidate.