mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
f78a480818
This implements several changes to encourage deterministic encryption to
remain unchanged. The main motivation is letting you define unique
indexes on deterministically-encrypted columns:
- By default, deterministic encryption will always use the oldest
encryption scheme to encrypt new data, when there are many.
- You can skip this default behavior and make it always use the current
encryption scheme with:
```ruby
deterministic: { fixed: false } # using this should be a rare need
```
- Deterministic encryption still supports previous encryption schemes
normally. So they will be used to add additional values to queries, for
example.
- You can't rotate deterministic encryption keys anymore. We can add
support for that in the future.
This makes for reasonable defaults:
- People using "deterministic: true" will get unique indexes working out
of the box.
- The system will encourage keeping deterministic encryption stable:
- By always using oldest encryption schemes
- By forbidding configuring multiple keys
But you can still opt-out of the default if you need to.
|
||
|---|---|---|
| .. | ||
| admin | ||
| autoloadable | ||
| publisher | ||
| account.rb | ||
| admin.rb | ||
| aircraft.rb | ||
| arunit2_model.rb | ||
| author.rb | ||
| author_encrypted.rb | ||
| auto_id.rb | ||
| binary.rb | ||
| binary_field.rb | ||
| bird.rb | ||
| book.rb | ||
| book_destroy_async.rb | ||
| book_encrypted.rb | ||
| boolean.rb | ||
| bulb.rb | ||
| cake_designer.rb | ||
| car.rb | ||
| carrier.rb | ||
| cart.rb | ||
| cat.rb | ||
| categorization.rb | ||
| category.rb | ||
| chef.rb | ||
| citation.rb | ||
| club.rb | ||
| college.rb | ||
| column.rb | ||
| column_name.rb | ||
| comment.rb | ||
| company.rb | ||
| company_in_module.rb | ||
| computer.rb | ||
| contact.rb | ||
| content.rb | ||
| contract.rb | ||
| country.rb | ||
| course.rb | ||
| customer.rb | ||
| customer_carrier.rb | ||
| dashboard.rb | ||
| default.rb | ||
| department.rb | ||
| destroy_async_parent.rb | ||
| destroy_async_parent_soft_delete.rb | ||
| developer.rb | ||
| discount.rb | ||
| dl_keyed_belongs_to.rb | ||
| dl_keyed_belongs_to_soft_delete.rb | ||
| dl_keyed_has_many.rb | ||
| dl_keyed_has_many_through.rb | ||
| dl_keyed_has_one.rb | ||
| dl_keyed_join.rb | ||
| dog.rb | ||
| dog_lover.rb | ||
| doubloon.rb | ||
| drink_designer.rb | ||
| edge.rb | ||
| electron.rb | ||
| engine.rb | ||
| entrant.rb | ||
| entry.rb | ||
| essay.rb | ||
| essay_destroy_async.rb | ||
| event.rb | ||
| eye.rb | ||
| face.rb | ||
| family.rb | ||
| family_tree.rb | ||
| friendship.rb | ||
| frog.rb | ||
| guid.rb | ||
| guitar.rb | ||
| hotel.rb | ||
| human.rb | ||
| image.rb | ||
| interest.rb | ||
| invoice.rb | ||
| item.rb | ||
| job.rb | ||
| joke.rb | ||
| keyboard.rb | ||
| legacy_thing.rb | ||
| lesson.rb | ||
| line_item.rb | ||
| liquid.rb | ||
| matey.rb | ||
| measurement.rb | ||
| member.rb | ||
| member_detail.rb | ||
| member_type.rb | ||
| membership.rb | ||
| mentor.rb | ||
| message.rb | ||
| minimalistic.rb | ||
| minivan.rb | ||
| mixed_case_monkey.rb | ||
| molecule.rb | ||
| mouse.rb | ||
| movie.rb | ||
| node.rb | ||
| non_primary_key.rb | ||
| notification.rb | ||
| numeric_data.rb | ||
| order.rb | ||
| organization.rb | ||
| other_dog.rb | ||
| owner.rb | ||
| parrot.rb | ||
| person.rb | ||
| personal_legacy_thing.rb | ||
| pet.rb | ||
| pet_treasure.rb | ||
| pirate.rb | ||
| possession.rb | ||
| post.rb | ||
| post_encrypted.rb | ||
| price_estimate.rb | ||
| professor.rb | ||
| project.rb | ||
| publisher.rb | ||
| randomly_named_c1.rb | ||
| rating.rb | ||
| reader.rb | ||
| recipe.rb | ||
| record.rb | ||
| reference.rb | ||
| reply.rb | ||
| room.rb | ||
| section.rb | ||
| seminar.rb | ||
| session.rb | ||
| ship.rb | ||
| ship_part.rb | ||
| shipping_line.rb | ||
| shop.rb | ||
| shop_account.rb | ||
| speedometer.rb | ||
| sponsor.rb | ||
| squeak.rb | ||
| strict_zine.rb | ||
| string_key_object.rb | ||
| student.rb | ||
| subscriber.rb | ||
| subscription.rb | ||
| tag.rb | ||
| tagging.rb | ||
| task.rb | ||
| topic.rb | ||
| toy.rb | ||
| traffic_light.rb | ||
| traffic_light_encrypted.rb | ||
| treasure.rb | ||
| treaty.rb | ||
| tree.rb | ||
| tuning_peg.rb | ||
| tyre.rb | ||
| user.rb | ||
| user_with_invalid_relation.rb | ||
| uuid_child.rb | ||
| uuid_comment.rb | ||
| uuid_entry.rb | ||
| uuid_item.rb | ||
| uuid_message.rb | ||
| uuid_parent.rb | ||
| vegetables.rb | ||
| vertex.rb | ||
| warehouse_thing.rb | ||
| wheel.rb | ||
| without_table.rb | ||
| zine.rb | ||