With rise of blockchain popularity, more and more people seek to implement blockchain technology into their projects. Most common way is to take existing blockchain stack, such as Azure Blockchain Workbench or Oracle Blockchain Platform. While the blockchain technology is well-protected by its algorithms it is still vulnerable because its privacy relies on regular cryptography. And mistakes or vulnerabilities in key management protocols can affect even the most secure blockchain projects. This article considers question of vulnerabilities within Azure Blockchain Workbench key management system. We describe potential threats for each stage of key management lifecycle based on public reports and then assess how likely are those threats to realize within Azure Blockchain Workbench environment based on the technical documentation for Azure Blockchain Workbench and Azure Key Vault. Finally, we compile results of our assessment into the key management threat table with three distinct degrees of protection: fully protected, partially protected and not protected.

翻译：随着区块链技术普及程度的提高，越来越多的人尝试将区块链技术应用于自身项目。大多数常见做法是采用现有区块链堆栈，例如Azure区块链工作台或Oracle区块链平台。尽管区块链技术本身通过算法得到了良好保护，但由于其隐私性依赖于常规密码学，仍然存在潜在风险。密钥管理协议中的错误或漏洞可能影响最安全的区块链项目。本文研究了Azure区块链工作台密钥管理系统的漏洞问题。我们基于公开报告描述了密钥管理生命周期每个阶段的潜在威胁，随后根据Azure区块链工作台和Azure密钥保管库的技术文档，评估了这些威胁在Azure区块链工作台环境中实现的可能性。最后，我们将评估结果整理为密钥管理威胁表，包含三个不同保护等级：完全保护、部分保护和未保护。