🙈
Zero‑Knowledge Encryption
Encryption
Client-controlled keys prevent provider plaintext access.
Definition
Zero‑knowledge encryption relies on client-side encryption and key management where decryption keys are never available to the service provider, keeping provider access limited to ciphertext.
In plain English
Client-controlled keys prevent provider plaintext access.
Why this matters
Why it matters: It reduces insider and server-side compromise impact and narrows legal/operational access paths.
Example
Example: Client-side AES encryption with keys derived from user secrets and never sent to the server.