| Thanks for all the comments. CipherStash isn't something that we just threw together on a weekend. We've spent years developing it. I've personally invested almost every waking moment for the last 6 years working on this (and the prior 2 preparing to quit my job so I could work on it full time). I get that it seems like snake oil to some. But that's just because we don't do a good enough job of explaining what we've created. We're working on that - we're engineers, not marketers. There have been prior attempts at making tech like this work, and maybe because those approaches were limited, its tainted how folks see encryption tech. We've studied many of the previous attempts and invested in the engineering required to overcome the problems. Key management - we made a 2 party key system that is faster and has a better security model than AWS KMS alone. Not because we thought it was fun, not on a whim but because it was the only way to solve the real security challenges we faced when it comes to protecting data. Searchable encryption - that is less secure than homomorphic encryption but FAST. Like under a few milliseconds for most queries (homomorphic would take literally minutes or worse). And a whole lot better than no encryption at all. It uses a key per value. Encrypt query language - a framework that makes searchable encryption work in standard postgres. No exotic index schemes, no custom builds. Just SQL functions. Typescript and Rust libraries to make this _almost_ drop-in for Prisma Next, supabase-js
and Drizzle. Identity integrations with Supabase, Clerk, Auth0, and Okta. A postgres proxy that automatically encrypts and decrypts data for authorized requests - for when using the SDK isn't possible/convenient. And an audit system that records every access and can send data to anything you can connect to AWS firehose or an S3 bucket. This is real and IMHO is exceptional engineering...anyone know a great technical marketer?! https://github.com/cipherstash/stack
https://github.com/cipherstash/benches
https://github.com/cipherstash/proxy
https://github.com/cipherstash/encrypt-query-language |