Per-tenant data-at-rest encryption

Hi everyone,

One of our primary use cases require us to store data from multiple customers within the same database, while using different encryption keys when storing that data on the disk.

Does CockroachDB support such a usecase?

Best,
Moshe.

Hi @bmoshe,

CockroachDB provides encryption at rest per store. See the documentation: https://www.cockroachlabs.com/docs/stable/encryption.html

You could conceivably set things up to have a different store per database or table, and therefore get isolated encryption keys per database or table.

https://www.cockroachlabs.com/docs/stable/cockroach-start.html#store

You’d likely be treading some new ground here, but I think what you desire is at least possible.

Jordan