# Encrypting data at Rest is achievable
**URL:** https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [May 7, 2020, 10:48am UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513 "2020-05-07T10:48:03Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@spreitzer](https://discuss.elastic.co/u/spreitzer)
#### Post date: [May 7, 2020, 10:48am UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513/1 "2020-05-07T10:48:04Z")
Hi
I would like to point out after reading through several closed discussions in this forum that encryption at Rest is achievable but AFAIK not implemented (yet). Some discussions in this forum refer to this problem and the functionality is deemed as not implemented.
However the functionality could be implemented if the API would accept tokens analyzed from the client. If the client could send the encrypted document and the tokens of the document, Elasticsearch could accept them and enter the information in the index as provided. This does compromise the information in the document to an extend that a prediction of the content of the document could be made, but the content could still not be proven without decryption. The context and essences of the document would still be protected, but searchable.
The decision to whether this level of security is sufficient can be made from the client side.
I am hereby encouraging to allow client provided tokens to be inserted into indexes to be implemented in Elasticsearch, if not yet done already.
Kind regards
Sascha Spreitzer
---
### Author:  [@Lynch145](https://discuss.elastic.co/u/Lynch145)
#### Post date: [May 7, 2020, 11:12am UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513/2 "2020-05-07T11:12:54Z")
By **encrypting data at rest** , you're essentially converting your customer's sensitive **data** into another form of **data** [.](https://www.mysubwaycard.pro/) This usually happens through an algorithm that can't be understood by a user who does not have an **encryption** key to decode it.
---
### Author:  [@spreitzer](https://discuss.elastic.co/u/spreitzer)
#### Post date: [May 7, 2020, 2:03pm UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513/3 "2020-05-07T14:03:31Z")
Oh I see, my question is therefore not encryption at Rest, but indexing of encrypted data by tokens provided through the client. Thank you!
---
### Author:  [@spreitzer](https://discuss.elastic.co/u/spreitzer)
#### Post date: [May 7, 2020, 2:07pm UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513/4 "2020-05-07T14:07:55Z")
See other discussion: "Indexing encrypted documents"
> [@Indexing encrypted documents](https://discuss.elastic.co/t/indexing-encrypted-documents/231559):
>
> Hi I would like to point out after reading through several closed discussions in this forum that indexing of encrypted documents is achievable but AFAIK not implemented (yet). Some discussions in this forum refer to this problem and the functionality is deemed as not implemented. However the functionality could be implemented if the API would accept tokens analyzed from the client. If the client could send the encrypted document and the tokens of the document, Elasticsearch could accept them a…
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 4, 2020, 2:07pm UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513/5 "2020-06-04T14:07:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.