Hi Zahir,
pgsodium is a new-ish encyption extension built around the libsodium encryption API.
It supports calling a script to load a hidden key in memory and use that key to derive other keys. There's an example shown in the documentation. I'm working on support for the Zymkey hardware security module, as well as support for the AWS key management API.
-Michel
On Sat, Jul 4, 2020 at 11:22 PM Zahir Lalani <ZahirLalani@oliver.agency> wrote:
Hello
Does anyone have any serious experience of implementing app level encryption with strong key management?
If so would like to arrange an offline chat please
Z
