I'm contemplating using Amazon's Simple Queue System as the basis of an enterprise message bus. According to Amazon, the contents are not encrypted, which means the application(s) will have to handle encryption / decryption.
It seems likely that this cryptosystem will need:
- key distribution among services that access the message bus
- key rotation / revocation
- authentication and integrity checks
- performance (use symmetric encryption)
This seems like an extremely common problem, is there an existing methodology or standard around message bus encryption for these situations?