Keeping Secrets - Emerging Practice in Database Encryption

Explore emerging practices in database encryption through this 41-minute Black Hat conference talk. Gain practical guidance for protecting high-sensitivity workloads in demanding privacy and compliance environments. Dive deep into database encryption threat models and production ops realities, including data in-use methods and blind administrator models. Learn about various database systems like QuickDB, Postgres, and MongoDB, as well as concepts such as histograms, plaintext, FFT, deterministic encryption, and field-level keys. Discover insights on web application security, encryption key models, and Secure Enclaves. Presented by Kenn White, this talk offers valuable knowledge for architects and defenders working with sensitive data.

Introduction
Ken White
Sandy Kumar
QuickDB
Postgres
MongoDB
Amazon
Histograms
plaintext
FFT
Customer deployments
deterministic encryption
web application security
fieldlevel keys
model
encryption keys
Secure Enclave
Conclusion