Active Storage Encryption

Customer-supplied encryption keys for ActiveStorage blobs

This library enables use of per-blob encryption keys with ActiveStorage, with a separate encryption key for every Blob. To implement encryption, it enables the use of CSEK on Google Cloud, SSE-C on AWS, and block_cipher_kit for files on disk.

What you get

• You generate an encryption key which satisfies the provider's requirements
• Once the encrypted file is in the cloud storage, there is no plaintext version present anywhere
• Every read access to the file requires that you provide the encryption key

Installing it

# Gemfile
gem "active_storage_encryption"

Details

52 stars on GitHub · MIT licensed · maintained by cheddar-me. Source: https://github.com/cheddar-me/active_storage_encryption