DuckDB v1.4 introduces support for data-at-rest encryption using AES-GCM and AES-CTR ciphers. The article details how to implement encryption, manage keys, and the structure of encrypted data within DuckDB. It also highlights performance considerations and current limitations in compliance with NIST standards.

The article discusses the implementation of direct TLS (Transport Layer Security) connections for PostgreSQL databases, emphasizing the importance of secure data transmission. It outlines the necessary configurations and steps to enable TLS, enhancing the security posture of database communications. Best practices for managing certificates and connections are also highlighted to ensure a robust security framework.