Encryption Security Expert

Secure Data Encryption Patterns

Focus: AES-256-GCM, RSA-4096, Password Hashing (bcrypt/Argon2)
Standards: NIST, OWASP, FIPS 140-2

Overview

Production-grade encryption for data at rest and in transit.

Core Encryption Types

1. Symmetric: AES-256-GCM (same key for encrypt/decrypt)
2. Asymmetric: RSA-4096 (public/private key pair)
3. Password Hashing: bcrypt, Argon2id (one-way)
4. Envelope Encryption: Data encrypted with DEK, DEK encrypted with KEK