Encryption on SILO https://silo.pgsty.com/tags/encryption/ Recent content in Encryption on SILO Hugo en Thu, 12 Nov 2026 03:50:08 +0800 Multi-Pool CopyObject: Cross-Pool Historical Version Self-Copy, Moving-Pool Authority, and Compression Indexes https://silo.pgsty.com/blog/design/multi-pool-copy-placement/ Wed, 11 Nov 2026 00:00:00 +0000 https://silo.pgsty.com/blog/design/multi-pool-copy-placement/ Why copying a historical version of an object onto its own key failed with 404 NoSuchVersion across server pools, why placement and rewrite decisions must run before encryption and compression transforms, and why pooled copy rewrites must forward IndexCB for multi-block S2 ranged reads. Batch Key Rotation: Persisting KMS Associated-Data Context and Guarding UTF-8 Round-Trips https://silo.pgsty.com/blog/design/batch-keyrotate-kms-context/ Wed, 11 Nov 2026 00:00:00 +0000 https://silo.pgsty.com/blog/design/batch-keyrotate-kms-context/ Why SSE-KMS batch key rotation silently dropped encryption.context on every object since upstream MinIO introduced keyrotate in 2023, why changing Validate() to a pointer receiver would still fail across retries and restarts, and why invalid UTF-8 must be rejected before sealing KMS keys.