AWS KMS now supports Elliptic Curve Diffie-Hellman (ECDH) key agreement

This announcement introduces a new feature in AWS Key Management Service (KMS) that supports Elliptic Curve Diffie-Hellman (ECDH) key agreement. This allows two parties to establish a shared secret over a public channel.

Specifically, the article covers:

• The ability to derive a shared secret using another party's public key and your own elliptic-curve KMS key within the KMS hardware security module (HSM)
• Using the shared secret to derive a symmetric key for encrypting/decrypting data between the parties
• Integrating with the AWS Encryption SDK for simplified key derivation and encryption
• Potential use cases like hybrid encryption schemes and seeding secrets in remote devices or AWS Nitro Enclaves
• Availability in all AWS Regions, including AWS GovCloud (US)