Skip to content

Architectural Decision Records (ADRs)#

Architectural Decision Records document key architectural choices, trade-offs, and design rationale for Easy Encryption.

Index of ADRs#

ADR Title Status Date Summary
001 Use sealed box encryption for credentials-at-rest Implemented 2025-12-10 Uses Libsodium asymmetric sealed box encryption (crypto_box_seal) as the primary mechanism for encrypting credentials.
002 Do not require nonce management for encrypted credentials Implemented 2025-12-10 Uses sealed boxes to eliminate application-level nonce handling and simplify storage formats.
003 Use state as fallback storage when file storage is unavailable Implemented 2025-12-10 Provides automatic Drupal State API fallback when filesystem storage is unavailable, guaranteeing credentials are never stored in plaintext config.