Tagged articles

field-level encryption

2 articles · Page 1 of 1

Aug 3, 2026 · Information Security

Are You Implementing Field-Level Encryption Correctly? Best Practices Explained

This article examines common pitfalls and misconceptions in field‑level encryption, explains why AES‑GCM and proper AAD are essential, outlines threat modeling, key hierarchy, blind indexing for searchable data, migration strategies, key rotation, performance considerations, and secure integration with MyBatis, Kubernetes, and Vault.

AES-GCMKubernetesMyBatis

0 likes · 49 min read

Are You Implementing Field-Level Encryption Correctly? Best Practices Explained

LuTiao Programming

Feb 5, 2026 · Information Security

Is Your Database Storing Plaintext? How Spring Boot Field‑Level Encryption Can Rescue You

The article explains why storing sensitive columns in plaintext leaves systems vulnerable even when the database is encrypted, and demonstrates a low‑intrusion, maintainable field‑level encryption solution for Spring Boot using JPA AttributeConverters, including code, pros, cons, and production best practices.

AESDatabase SecurityJPA

0 likes · 10 min read

Is Your Database Storing Plaintext? How Spring Boot Field‑Level Encryption Can Rescue You