Clevis/Tang: Network-bound Disk Encryption
When data is encrypted, who and when should access it in the cloud? How to protect stolen data from decryption? How to reduce risks of transporting physical storage with your encrypted content? Clevis and Tang are a pair of open source projects that allow to bind your data to externally controlled entities. Together, they create a simple and scalable infrastructure to encrypt data at rest and be sure how it is accessed. Come and see Clevis/Tang in action.
Sr. Principal Software Engineer
Sr. Principal Software Engineer at Red Hat, working on security and identity management. Actively participates in FreeIPA, SSSD, Samba, and many other free software projects targetting an open enterprise infrastruture.