Data At Rest Innovation with Turnstile

Abstract

Encryption is good. Like protection & safety equipment, we hope never to need it, but there’s no question that it’s smart to have and useful, but we all wish it wasn’t such a nuisance! At heart, though, it’s not encryption per se that hurts, but key handling: how do keys get to the system, how are the keys stored (if they are), and how it can be assured that keys are properly discarded once finished. Instrumentation, maintenance, and safety systems can be particularly challenging, often being self-contained with limited accessibility and/or connectivity. The Turnstile Encryption System is a new & secure approach to key handling for recording and telemetry. Turnstile uses proven and certified encryption algorithms to create a “write only” deployed solution: data sources and recorders can encrypt but cannot decrypt without the “read” key, which is never stored on the test article. This paper explains Turnstile, why it can be trusted, and how it reduces the user burden of encryption, particularly for Data at Rest and telemetry Data in Transit.