product · May 21, 2026
HashiCorp Releases SDK for Envelope Encryption in Vault Transit for Large Artifacts
Share the canonical public link.
HashiCorp introduces an SDK for envelope encryption with Vault Transit on May 20, 2026. The SDK lets applications generate local data encryption keys while Vault manages policies and master keys for artifacts up to 2^64 bytes or 18 exabytes. HashiCorp tested the approach in a prototype that encrypted 256 TB artifacts without transferring large payloads to Vault. Ariso AI implemented the model for distributed AI pipelines where Vault acts as the root of trust. Vault Transit previously required central processing of all data which created bottlenecks for streaming and large-scale workloads.