Cryptography Overview

The Cryptography module provides key management and encryption services.

Sections

• Cryptographic PETs: The algorithms (SIV, FPE) and the key hierarchy underneath them.
• Key Management Architecture: How eXate manages encryption keys, key durability, and loss prevention, without ever custodying customer master keys.
• Fragmentation Architecture and Quantum Secure Protection: How eXate fragments ciphertext, keys, and validation components, combined with ABAC enforcement, for a quantum-resilient security model.
• Azure HSM Key Rotation Process: Mechanism to enforce compliance, strengthen security and simplify key lifecycle management.
• AWS CloudHSM: AWS CloudHSM cluster initialization and KMS custom key store setup.