Guidance on Custom TDF Platform in compliance with OpenTDF Spec

[mm192010]

Hello,

I am currently building a TDF (Trusted Data Format) platform and would like to clarify the feasibility and compliance of our planned architecture.

Current Infrastructure:
We have already have the following components which is used by our proprietary software

• PDP (Policy Decision Point) - for policy evaluation
• PAP (Policy Administration Point) - for policy configuration
• ERS (Entity Resolution Service) - connecting to various attribute sources
• IDP (Identity Provider) - supporting OIDC

The only missing component in our architecture is the KAS (Key Access Service). We are considering building a custom KAS implementation that provides the required API endpoints. We will follow the openAPI spec for KAS as it is

1. Public Key endpoint - to return the KAS public key for policy encryption
2. Rewrap endpoint - to handle key unwrapping/rewrapping based on policy evaluation

I would like to check if the above can support

1. The current openTDF sdks can be used for creating and reading tdf files
2. Otdfctl or any other tdf client can work with my platform ? (only for creating and reading TDF)

Regards
Max