tree aef7c0a4dfa2b0aefc817616afccb69779de498b
parent 592837abc8b07f9b28898fa91c31658e2beecfc4
author Robert Newson <rnewson@apache.org> 1651757977 +0100
committer Robert Newson <rnewson@apache.org> 1655827551 +0100

Database Encryption Support

CouchDB can optionally encrypt databases and views.

We use AES in Counter Mode, which ensures we can encrypt and decrypt
any section of the file without padding or alignment. The ciphertext
is the same length as the plaintext. This mode provides
confidentiality but not authentication.

Key management is configurable, a system administrator can write a
module implementing the couch_encryption_manager behaviour with any
implementation.