Show HN: Roast my SQLite encryption at-rest

Re:Show HN: Roast my SQLite encryption at-rest by justinclift on Wednesday May 01, 2024 @01:22PM (#40226331)

Sure, if its LEO. That's not the threat model for most organisations encrypting their data at rest though. :)

---

> should absolutely not do things that can be construed as destroying evidence.

It'd be a very long stretch to successfully argue "removing access to the key" is destroying evidence. The data would still be intact, and available, to anyone with the key.

Just not to whoever physically grabbed the server. ;)

[ Parent | on HN ]

Re:Show HN: Roast my SQLite encryption at-rest by cryptonector on Wednesday May 01, 2024 @05:49PM (#40229961)

I would get legal advice on that, from a lawyer in the relevant jurisdiction, before going with that.

[ Parent | on HN ]

Re:Show HN: Roast my SQLite encryption at-rest by justinclift on Wednesday May 01, 2024 @10:41PM (#40232211)

Of course. And I'm just pointing out a commonly implemented approach.

LEO isn't generally the consideration of places encrypting their stuff. Businesses dealing with sensitive data (PII, etc) are required to as a matter of course.

[ Parent | on HN ]