MinIO Security Overview

Server-Side Encryption

Server-Side Encryption - Preliminaries

Secret Keys

Content Encryption

Figure 1 - Secure Channel construction

Cryptographic Primitives

Randomness

Server-Side Encryption with client-provided Keys

Key rotation

Server-Side Encryption with a KMS

Figure 2 - KMS key hierarchy

Key rotation - Basic Operation

Figure 3 - KMS data key rotation

Secure Erasure and Locking

Acronyms