Design key management service
GoogleSoftware Engineer · Technical Screen
Last updated
This question evaluates system design and security competencies—specifically cryptographic key lifecycle management, HSM integration, access control, auditing, multi-tenant isolation, and scalability—within the System Design domain.
Design a key management service where a client provides a key ID and receives the corresponding key material. Specify APIs, key generation and storage (HSM versus software), access control, auditing, key rotation, usage limits, and security and threat model. Discuss latency, availability, and blast radius of compromise.
Solution walkthrough is for members
Get the full walkthrough with reference code and complexity analysis, plus Kitty Coach at 300 messages a day. Hints, the code runner and community answers stay free.