Modules
Public API for encrypting/decrypting field payloads.
AES-256-GCM encrypt/decrypt implementation with key rotation metadata.
Parameterized Ecto type that encrypts values on dump/3 and decrypts on load/3.
Loads and validates encryption keys from application config.
Optional Plug to validate key configuration at runtime and expose metadata.
Postgres migration helpers.
Schema helpers for encrypted fields.