Re: Data encryption/decryption at rest

Frank Muller <[email protected]> Sat, 22 Jan 2022 16:31:46 +0100
Newsgroups gmane.comp.lang.erlang.general
Message-ID <CAFA6GnAo1rujt0-dK5obJTK8YjGMQJgqQJMUgpcTN4Ex6cfvhA@mail.gmail.com>
I’m wondering if we can achieve something like this in pure Erlang:
https://stackoverflow.com/a/37953361



> I’ve heard about Luks / Ceph.
>
> Any practical experience with them or any other alternative? I’m looking
> for a simple solution.
>
> Will data decrypting affect performance?
>
>
> /Frank
>
>
>> Can you just use full disk encryption at the operating system level?
>>
>> On Jan 22, 2022, at 5:04 AM, Frank Muller <[email protected]>
>> wrote:
>>
>> Hi guys,
>>
>>
>>
>> We have some ETS tables persisted to disk periodically.
>>
>> These data are almost static (rarely change) and contains clients
>> information such as: name, gender, date/place of birth, security token, etc.
>>
>> Due to new policy in place, these data has to be encrypted at rest.
>> But I still need to access it in a decrypted way inside my Erlang app.
>>
>> What approach should I take?
>> Is there any Erlang library to help with this task?
>>
>> Disclaimer: I’m by far not a security expert
>>
>> Thanks
>> /Frank
>>
>>