Confidentiality
Central infrastructure cannot recover the protected plaintext.
SECURITY
Assume the server is already compromised.
Prevention and response remain essential. Clave addresses what happens when they are not enough and an attacker gains full control of the infrastructure storing sensitive data.
THE SECURITY PROPERTY
Root access to the server is not a key to the data.
An attacker controlling central infrastructure cannot derive the keys needed to decrypt data protected by Clave or alter that data without detection. Compromising Clave's own infrastructure does not provide those keys either.
Integrity
Unauthorised changes to protected information are detected.
No master target
There is no central key-management service that unlocks the complete dataset.
SYSTEM DESIGN
Avoid restoring trust somewhere else.
Client-side cryptography
Sensitive data is encrypted before it reaches the network using keys central systems do not possess.
Verified software
Software artefacts are validated so a compromised delivery path cannot quietly replace the code applying protection.
Post-quantum protection
Post-quantum and established classical cryptography protect the same data independently.
TALK TO CLAVE
Bring your threat model.
Tell us what the attacker controls and what must remain protected. We will determine what can be removed from the trusted boundary.