Key Rotation Architecture Advice

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Post Body

Hi,

I have an environment where I need to encrypt a column. Per the title, encryption itself isn’t the problem. I can’t wrap my head around how I rotate keys.

I know the nodejs application will store the decrypt key in the environment. Then redeploy with a new key.

In my head, I’m imagining telling the devs to try two keys. If one fails, use the other. That would cover the case where there is a moment in time when transitioning from the old key to the new key.

Author

Account Strength

100%

Account Age

9 years

Verified Email

Yes

Verified Flair

Total Karma

19,466

Link Karma

2,624

Comment Karma

16,748

Profile updated: 1 day ago

Posts updated: 11 months ago

chock-a-block

Subreddit

r/PostgreSQL

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 5 years ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/PostgreSQL/...