SecSealKit

0.3.1

SecSealKit: Authenticated encryption for PowerShell 5.1+. Binary module with AES-256-CBC + HMAC-SHA256 SCS1 envelopes.

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name SecSealKit

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name SecSealKit

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2025 Stefan Ploch. Apache-2.0

Package Details

Author(s)

  • Stefan Ploch

Tags

Security Encryption Cryptography AES HMAC Secrets

Cmdlets

Protect-Secret Unprotect-Secret Get-EnvelopeMetadata New-Signature Compare-Signature

Dependencies

This module has no dependencies.

Release Notes

v0.3.0 - Hybrid Encryption & Certificate Support

- SCSPK1 hybrid encryption (RSA-OAEP + AES-256-CBC) for certificate-based "sealed secrets"
- New Sign-Data / Verify-Data cmdlets for HMAC-SHA256 integrity checks
- Get-EnvelopeMetadata for inspecting envelopes without decryption
- Auto-discovery of certificates in Windows certificate stores

Full changelog: https://github.com/OfficialStjp/SecSealKit/blob/main/CHANGELOG.md

FileList

  • SecSealKit.nuspec
  • SecSealKit.psd1
  • LICENSE
  • README.md
  • NOTICE
  • SecSealKit.dll

Version History

Version Downloads Last updated
0.3.1 (current version) 4 1/22/2026