Encryption and Licensing: How We Built It for a Shipped Product
The complete story of designing a licensing and backup encryption system for a product shipped to customer sites. Ed25519 digital signatures, dual-envelope AES-256-GCM encryption, SHA-256 key derivation, and the master key trust trade-off.