Unverified50% confidenceFactExact time
The core of envelope encryption is a two-layer key division of responsibilities: the Data Key directly encrypts the actual sensitive data, while the Master Key (KEK, Key Encryption Key) is used to encrypt and decrypt the Data Key.
1
Sources
50%
Confidence
Long-term
Relevance
9/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPasskey is based on public-key cryptography, replacing traditional passwords with biometric recognition or a device PIN.76% similarUnverifiedLUKS 基于 dm-crypt 内核模块实现，采用分层密钥架构，实际数据由主密钥加密，主密钥由用户口令通过 PBKDF2/Argon2 等密钥派生函数保护75% similarUnverifiedIn end-to-end encryption (E2EE), each user holds a key pair—the public key is used for encryption and the private key for decryption—and the private key never leaves the user's device.73% similarUnverifiedClient-side encryption in restic and Kopia is completed locally, with the key held by the user, so only ciphertext is ever stored in the cloud.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/920718API
curl https://kongchang.com/api/v1/knowledge/claims/920718MCP
get_claim(id=920718)