Posts
CipherStash is a cybersecurity platform that provides searchable, field-level encryption. It has been designed to secure sensitive data within PostgreSQL.
CipherStash is motivated by the premise:
Traditional database encryption isn't secure
Most developers assume that their data is safe because their database has encryption at rest enabled. However, encryption at rest only protects the physical storage disk, backup files, or discarded hardware. Once the database server is booted up and running, all data is loaded into memory as plaintext. If an attacker exploits a SQL injection vulnerability, gains access to the host server, or gets hold of database credentials, they can read every piece of sensitive data in the clear.
To prevent this, you could encrypt sensitive fields (like emails or SSNs) inside your application before saving them. But traditional field level encryption introduces two major problems:
Full article on IProgrammer:
Comments