Glossary term
What is Envelope encryption? Meaning for developers
Data encrypted with a data key; data key encrypted with a master key. Example: Cheap key rotation.
Learn it properly · System DesignLesson 51: Encryption & Secrets ManagementUnencrypted traffic “inside our network”, an unencrypted backup in a public bucket, a database password pushed to GitHub. Where to encrypt in transit and at rest, who holds the keys, how envelope encryption and KMS work, end-to-end encryption, and how to store, deliver and rotate secrets.