Medium
Building a Search Engine for Encrypted Data, Inspired by Indonesia's PDP Law
The full reasoning behind encrypted-search-service: why decrypting a million rows to run a string compare is not a workaround, what n-grams buy and what they leak, why the field name belongs inside the HMAC input, and how versioned keys turn rotation from an outage into a config change.
Searchable encryptionUU PDPZero trust