Tagged articles

AES-GCM

3 articles · Page 1 of 1

Aug 3, 2026 · Information Security

Are You Implementing Field-Level Encryption Correctly? Best Practices Explained

This article examines common pitfalls and misconceptions in field‑level encryption, explains why AES‑GCM and proper AAD are essential, outlines threat modeling, key hierarchy, blind indexing for searchable data, migration strategies, key rotation, performance considerations, and secure integration with MyBatis, Kubernetes, and Vault.

AES-GCMKubernetesMyBatis

0 likes · 49 min read

Are You Implementing Field-Level Encryption Correctly? Best Practices Explained

dbaplus Community

Apr 9, 2026 · Information Security

Designing Practical Encrypted Storage for Sensitive User Data

This article explains why encrypting sensitive fields like passwords, phone numbers, and ID numbers is essential, details a balanced approach using AES‑GCM encryption, HMAC indexes, and masked fields, and shares real‑world lessons from implementing the solution in a production system.

AES-GCMDatabase DesignHMAC

0 likes · 21 min read

Designing Practical Encrypted Storage for Sensitive User Data

Ray's Galactic Tech

Dec 4, 2025 · Information Security

How to Secure Phone Numbers in Databases: Threat Modeling, Envelope Encryption, and High‑Performance Key Rotation

This guide presents a comprehensive, enterprise‑grade solution for encrypting phone numbers in databases, covering threat modeling, layered schema design, envelope encryption with KMS, Python service implementation, searchable indexes, key rotation, performance tuning, auditing, and common pitfalls.

AES-GCMKMSPython

0 likes · 11 min read

How to Secure Phone Numbers in Databases: Threat Modeling, Envelope Encryption, and High‑Performance Key Rotation