3 ms·
Use envelope encryption and wipe the key after the fact. Bonus: use a committing AEAD mode and use the previous record as AEAD when writing the record. You ca
by some_furry 4y ago
Use envelope encryption and wipe the key after the fact.
Bonus: use a committing AEAD mode and use the previous record as AEAD when writing the record.
You can keep the ciphertext in the ledger forever. Zeroing out the wrapped key makes it unretrievable.