ActiveRecord::Encryption; Stop Hackers from Reading your Data
July 14, 2023
39 min
Free
ruby
ruby-on-rails
key-provider
aes-gcm
active-record
encryption
security
database
key-management
data-protection
cryptography
github
Description
In this talk, Matthew Langlois and Kylie Stradley discuss ActiveRecord::Encryption and how to secure your data. They cover why encrypting database columns is important, how ActiveRecord::Encryption works, and the pitfalls and successes encountered while implementing it at GitHub. The presentation also delves into key management strategies, including storing keys in a secure vault and implementing custom key providers. They also discuss the process of upgrading existing records, both previously encrypted and plain text, to use ActiveRecord::Encryption, and touch upon important considerations like feature flags and disabling compression before encryption.