Skip to content

Instantly share code, notes, and snippets.

@leafac

leafac/encryption-at-rest.md

Created August 14, 2026 14:56
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save leafac/0b8ce132b75da0854007c96f481b9bc6 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save leafac/0b8ce132b75da0854007c96f481b9bc6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
encryption-at-rest.md
  • Encrypt data at rest
    • SQLite database only
      • SQLCipher / @journeyapps/sqlcipher
      • SQLite3 Multiple Ciphers / better-sqlite3-multiple-ciphers
      • No: It’s cumbersome because it requires us to change the SQLite that we use (which happens to be Node.js’s SQLite, so we probably want to keep that simple)
    • Directory
      • gocryptfs
        • FUSE
        • Replaces EncFS and ecryptfs
        • No: Could interact badly with SQLite, because it needs advanced filesystem features including locking, fsync() and so forth
      • fscrypt
        • Linux Kernel
        • No: Complicated to setup, because it requires special features from filesystem
      • LUKS with loopback container
        • Yes: Simple enough
    • External disk (LUKS)
    • The whole operating system (LUKS)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment