replying to @naw103
I've been thinking about this as well.
Would an attacker actually try that? In a mass attack they probably don't bother and just try to dump the db and move on. On a targeted attack they might ..
I've been thinking about entering the encryption keys in memory after server…
I’m sorry I miss read your post at first as storing the key in memory as the primary place rather than what you actually said pulling the key into memory after the reboot
You can’t just store the encryption key only in memory, you would loose the ability to decrypt your data on every reboot. The encryption key gets stored on a separate physical device normally a KMS and fetched into memory only for that session. At GPTree we use a unique DEK for…