Encrypt on-disk database

[miaLDN]

It's a potential security hole, and would be safer encrypted, and care to prevent unencrypted data from reaching the disk (swap for example).

Modern CPUs can decrypt AES very fast.

https://ashvardanian.com/posts/chacha-vs-aes-2025/

[dimo414]

It's a good suggestion, thanks for the pointer. If this is an immediate concern I suggest swapping the cache directory to somewhere user-private like ~/.cache. There's a built-in best-effort attempt to restrict access to the directory as well. Obviously this doesn't handle situations like physical access, but I am not as concerned about that threat model (people concerned about that threat should have encrypted drives).

The big wrinkle with encryption is key management, since the key has to be readable to bkt without encryption (meaning an adversary could potentially read it too). Do you have any suggestions for how to implement a secure key mechanism that we can use?