🔒 Database Encryption at Rest (dbcrypt)

Application-level AES-256-GCM authenticated encryption for sensitive database fields. Protects user credentials, Git SSH private keys, and external OAuth tokens with zero proprietary dependencies.

Cipher Engine
AES-256-GCM
256-bit AEAD Hardware accelerated
Active Key Digest
--
SHA-256 prefix digest
Total Records Secured
0
Across secrets, keys & tokens
User Secrets Encrypted
0
At rest in PostgreSQL
Git SSH Private Keys
0
Protected developer keys
🗝️ Keystore & Rotation History
1 Active Key
# Key Digest Status Created At Revoked At
Loading keystore...
⚡ Cryptographic Verification Sandbox

Test the live AES-256-GCM cipher pipeline against the active primary key to confirm zero-data-loss encryption and authentication tag verification.