{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-encryption-at-rest",
  "id": "encryption-at-rest",
  "kind": "mechanism",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Encryption at Rest",
  "ref": "architecture:encryption-at-rest",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-key-management",
          "json": "https://banes-lab.com/json/records/lexicon/key-management",
          "label": "Key Management",
          "markdown": "https://banes-lab.com/records/lexicon/key-management.md",
          "ref": "lexicon:key-management"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-data-protection",
          "json": "https://banes-lab.com/json/records/lexicon/data-protection",
          "label": "Data Protection",
          "markdown": "https://banes-lab.com/records/lexicon/data-protection.md",
          "ref": "lexicon:data-protection"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-confidentiality-of-stored-data",
          "json": "https://banes-lab.com/json/records/lexicon/confidentiality-of-stored-data",
          "label": "Confidentiality of Stored Data",
          "markdown": "https://banes-lab.com/records/lexicon/confidentiality-of-stored-data.md",
          "ref": "lexicon:confidentiality-of-stored-data"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-plaintext-sensitive-storage",
          "json": "https://banes-lab.com/json/records/lexicon/plaintext-sensitive-storage",
          "label": "Plaintext Sensitive Storage",
          "markdown": "https://banes-lab.com/records/lexicon/plaintext-sensitive-storage.md",
          "ref": "lexicon:plaintext-sensitive-storage"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-key-operations",
          "json": "https://banes-lab.com/json/records/lexicon/key-operations",
          "label": "Key Operations",
          "markdown": "https://banes-lab.com/records/lexicon/key-operations.md",
          "ref": "lexicon:key-operations"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-encryption-at-rest-key-operations",
          "json": "https://banes-lab.com/json/records/tension/encryption-at-rest-key-operations",
          "label": "Encryption at Rest / Key Operations",
          "markdown": "https://banes-lab.com/records/tension/encryption-at-rest-key-operations.md",
          "ref": "tension:encryption-at-rest-key-operations"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-plaintext-sensitive-storage",
          "json": "https://banes-lab.com/json/records/lexicon/plaintext-sensitive-storage",
          "label": "Plaintext Sensitive Storage",
          "markdown": "https://banes-lab.com/records/lexicon/plaintext-sensitive-storage.md",
          "ref": "lexicon:plaintext-sensitive-storage"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-key-management",
          "json": "https://banes-lab.com/json/records/lexicon/key-management",
          "label": "Key Management",
          "markdown": "https://banes-lab.com/records/lexicon/key-management.md",
          "ref": "lexicon:key-management"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-contextual",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-contextual",
          "label": "contextual",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-contextual.md",
          "ref": "vocabulary:severity-contextual"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/records/architecture-category/security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md",
          "ref": "architecture-category:security-privacy-compliance-governance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A mechanism that encrypts stored data with managed keys, so the storage medium alone does not reveal it.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-encryption-in-transit",
      "json": "https://banes-lab.com/json/records/architecture/encryption-in-transit",
      "label": "Encryption in Transit",
      "markdown": "https://banes-lab.com/records/architecture/encryption-in-transit.md",
      "ref": "architecture:encryption-in-transit"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-output-encoding",
      "json": "https://banes-lab.com/json/records/architecture/output-encoding",
      "label": "Output Encoding",
      "markdown": "https://banes-lab.com/records/architecture/output-encoding.md",
      "ref": "architecture:output-encoding"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const ciphertext = await keyManager.encrypt(\"foo-data-key\", JSON.stringify(foos));\nawait disk.write(\"foos.enc\", ciphertext);",
    "before": "await disk.write(\"foos.json\", JSON.stringify(foos));",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "storage",
    "database",
    "backups"
  ],
  "severity": "contextual"
}