AcraBlock # AcraBlock is a symmetric cryptographic container, it is more compact than AcraStruct. Acra uses an envelope encryption strategy: plaintext data is encrypted using data encryption key (DEK), and then DEK is encrypted using key encryption key (KEK). AcraBlock uses AES-256-GCM-PKCS#7 for both encryption procedures. See Cryptography and key management / Application level encryption. AcraBlock supports key rotation: it’s possible to rotate only KEK without re-encrypting the data (kno...
