YATA-NODE Blog

Blog

Cryptography

Articles tagged "Cryptography".

Security

Data-at-Rest Security for Builders: Encryption, Key Management, and Backups

Protecting data at rest is not a single switch. Choose the encryption layer (app / DB-TDE / disk), keep keys out of code (env vars → KMS → envelope encryption), encrypt and test-restore backups, and tighten access control — mapped by "which threat, defended by what," with US (breach laws, HIPAA, PCI DSS) and EU (GDPR Art. 32) drivers.

Read more
Security

Communication Security, Layer by Layer — TLS, Zero Trust & AuthN/AuthZ (US/EU)

Understand communication security through eight layers (OSI 7 plus an authentication / authorization layer): what to defend at each layer (TLS, IPsec, mTLS, zero trust, OAuth / OIDC), a layer-by-layer checklist, and the US/EU drivers (NIST, FedRAMP, NIS2, CRA, GDPR) — for practitioners who are not security specialists.

Read more