Tagged articles

Key Rotation

7 articles · Page 1 of 1

Sep 15, 2026 · Backend Development

Building an Enterprise OAuth2 Authorization Server with Spring Boot and Spring Authorization Server: Complete Guide

This guide walks through building a production-ready OAuth2/OIDC authorization server using Spring Boot 3.x and Spring Authorization Server 1.3, covering client registration, authorization code flow with PKCE, custom JWT claims, RSA key rotation, MFA integration, and deployment best practices.

JWTKey RotationMFA

0 likes · 37 min read

Building an Enterprise OAuth2 Authorization Server with Spring Boot and Spring Authorization Server: Complete Guide

Xiaolin Talks Programming

Sep 12, 2026 · Backend Development

Spring Boot SM2/SM3/SM4 Integration: Pitfalls, Key Management & Performance Tuning

This article details practical integration of Chinese national cryptographic algorithms SM2, SM3, and SM4 into Spring Boot, covering dependency setup, encryption/decryption, signing/verification, anti-replay protection, JWT implementation, TLS offloading via Nginx, key rotation strategies, and performance optimizations that raised throughput from 300 to 1300 TPS.

Chinese CryptographyKey RotationMLPS Compliance

0 likes · 20 min read

Spring Boot SM2/SM3/SM4 Integration: Pitfalls, Key Management & Performance Tuning

Cloud Architecture

Sep 9, 2026 · Backend Development

Production-Grade Spring Boot API Encryption: RSA + AES-GCM Protocol & Implementation

This article details a production-ready end-to-end encryption protocol for Spring Boot APIs using RSA-OAEP for key wrapping and AES-GCM for payload encryption, covering protocol specification, replay protection with Redis, key rotation strategies, filter-based decryption, testing failure paths, observability, and deployment validation.

AES-GCMAPI EncryptionKey Rotation

0 likes · 43 min read

Production-Grade Spring Boot API Encryption: RSA + AES-GCM Protocol & Implementation

Xiaolin Talks Programming

Jul 22, 2026 · Backend Development

Spring Boot Field Encryption with HashiCorp Vault: Production-Ready Patterns

This article demonstrates how to implement field-level encryption in Spring Boot using HashiCorp Vault's Transit engine, covering client configuration, unified encryption service, JPA and MyBatis integration, blind indexing for query performance, key rotation without downtime, disaster recovery, and defense-in-depth practices like HSM-backed root keys and audit logging.

Blind IndexingField-Level EncryptionHashiCorp Vault

0 likes · 17 min read

Spring Boot Field Encryption with HashiCorp Vault: Production-Ready Patterns

Black & White Path

May 14, 2026 · Information Security

The Dark Side and Hidden Risks of AI Relay Stations

AI relay stations bypass mainland China restrictions by repackaging foreign model APIs, but their three-layer proxy design introduces model substitution, billing manipulation, privacy leakage, and malicious code injection, creating a fragile supply chain that endangers developers, enterprises, and end‑users alike.

AI relay stationsKey RotationReverse Proxy

0 likes · 9 min read

The Dark Side and Hidden Risks of AI Relay Stations

dbaplus Community

Apr 9, 2026 · Information Security

Designing Practical Encrypted Storage for Sensitive User Data

This article explains why encrypting sensitive fields like passwords, phone numbers, and ID numbers is essential, details a balanced approach using AES‑GCM encryption, HMAC indexes, and masked fields, and shares real‑world lessons from implementing the solution in a production system.

AES-GCMHMACKey Rotation

0 likes · 21 min read

Designing Practical Encrypted Storage for Sensitive User Data

Ray's Galactic Tech

Dec 4, 2025 · Information Security

How to Secure Phone Numbers in Databases: Threat Modeling, Envelope Encryption, and High‑Performance Key Rotation

This guide presents a comprehensive, enterprise‑grade solution for encrypting phone numbers in databases, covering threat modeling, layered schema design, envelope encryption with KMS, Python service implementation, searchable indexes, key rotation, performance tuning, auditing, and common pitfalls.

AES-GCMKMSKey Rotation

0 likes · 11 min read

How to Secure Phone Numbers in Databases: Threat Modeling, Envelope Encryption, and High‑Performance Key Rotation