Encrypted Storage is the protection of data at rest by transforming it with cryptographic algorithms so that it is unreadable without the corresponding decryption keys. It can operate at the disk, filesystem, database, or object level, and is essential for confidentiality of sensitive data such as biometric templates. Proper key management, including secure key generation, rotation, and access control, is critical to its effectiveness.
Content
- Encryption may be applied at disk, filesystem, database, or application level, often using AES with keys held in hardware security modules or key-management services. The security of stored data depends as much on key lifecycle management and access control as on the cipher strength itself.