DuckDB v1.4 introduces support for data-at-rest encryption using AES-GCM and AES-CTR ciphers. The article details how to implement encryption, manage keys, and the structure of encrypted data within DuckDB. It also highlights performance considerations and current limitations in compliance with NIST standards.

Moxie Marlinspike, creator of Signal Messenger, is launching Confer, an open-source AI assistant designed to ensure user data remains private and unreadable by anyone except the account holders. Utilizing strong encryption and trusted execution environments, Confer aims to set a new standard for AI chatbots while maintaining user confidentiality and security.

WorkOS Vault is a developer-friendly encryption key management (EKM) solution that allows enterprises to encrypt, store, and control access to sensitive data such as tokens, passwords, and files. It offers robust security features including multiple layers of encryption, context-based key generation, and integration with various cloud key management services. The API facilitates easy implementation of enterprise-ready features while ensuring strict access control and detailed audit logging.