Learn more about Server Side Encryption with Linode Object Storage from our experts. Our Linode Support team is here to help you with your questions and concerns.

Server Side Encryption with Linode Object Storage

Did you know that server-side encryption secures data on Linode Object Storage?

Linode encrypts our data with our encryption key, at the object level before storing it to disk.

After the encryption process, the data can be decrypted by Linode only if the same encryption key accompanies the retrieval request. Hence, we can use Linode Object Storage to handle confidential data like Terraform configurations containing passwords and SSH keys.

SSE is a feature offered by Linode Object Storage to ensure data confidentiality and integrity by encrypting the data at rest.

There are two types of SSE options available with Linode Object Storage:

• SSE-S3: SSE-S3 (Server-Side Encryption with Amazon S3-Compatible Keys)

  This is the default option for SSE with Linode Object Storage. It uses the AES-256 encryption algorithm to encrypt your data.
• SSE-C: SSE-C (Server-Side Encryption with Customer-Provided Keys)

  It allows us to provide our own encryption keys for added security and control. When we upload an object to Linode Object Storage, we can include the encryption key as part of the request headers.

How to enable Server-Side Encryption with Linode Object Storage

We can easily enable SSE with Linode Object Storage by including the appropriate headers to specify the encryption method and key.

For instance:

1. First, install and configure the Linode CLI.
2. Then, upload an object with SSE-S3 encryption as seen here:

   linode-cli object-storage cp filename.txt bucketname/filename.txt --encryption sse-s3

   Alternatively, we can upload an object with SSE-C encryption, with our own encryption key as seen here:

   linode-cli object-storage cp filename.txt bucketname/filename.txt --encryption sse-c --encryption-key "encryption-key"

   Furthermore, we have to securely manage and store your encryption keys when using SSE-C to ensure data access and recovery. Our experts would like to point out that Linode does not store or manage your encryption keys for SSE-C.

[Need assistance with a different issue? Our team is available 24/7.]

Conclusion

To conclude, our Support Techs gave us a quick look at SSE with Linode Object Storage and how to enable it.