Data encryption made easy
summary
Library called eloquent model encrypt is open sourced after five years in production and builds on Laravel's Crypt (AES‑128/256) to manage per‑record keys, middleware that decrypts a user's private key into session, and three built‑in key providers (global, user, role/role‑user) plus chaining. A companion blind index provides searchable hashes with frequency‑leak caveats. Batch operations are disabled, migrations use an encrypted field type, key versioning and key rotation are supported, and the design reduces blast radius for server compromises.
AI-written summary · about
chapters (11)
- 0:00Introducing encryption
- 1:44Principle privacy principles
- 4:42Encryption vs hashing
- 7:40Encryption limitations
- 11:36Symmetric vs asymmetric
- 14:43Hybrid encryption model
- 17:01Eloquent model encrypt
- 19:52Role key providers
- 23:21Encrypted search
- 26:00Risk mitigation
- 28:13Conclusion
related talks
59mEasily Digestible Security Pills
59mDatabase Encryption in a GDPR World
38mActiveRecord::Encryption; Stop Hackers from...
51mKeynote: Data is a new security boundary
45mZero Knowledge; Meeting the Growing Demand for Security and Privacy
34mEncrypted Credentials on Rails 5.2: Secrets to Success
50mBuilding Production-Grade End to End Encrypted App...
10mEncryption Pitfalls and Workarounds