---
metadata:
  - name: generator
    content: Diplodoc Platform v5.50.6
alternate:
  - https://ydb.tech/docs/en/security/encryption/data-at-rest.md
  - https://ydb.tech/docs/ru/security/encryption/data-at-rest.md
sourcePath: en/core/security/encryption/data-at-rest.md
---
> **Documentation Index:** Fetch the complete configuration index at https://ydb.tech/docs/en/llms.txt

# Data at rest encryption

YDB supports transparent data encryption at the [DS proxy](https://ydb.tech/docs/en/concepts/glossary.md#ds-proxy) level using the [ChaCha8](https://cr.yp.to/chacha/chacha-20080128.pdf) algorithm. YDB includes two implementations of this algorithm, which switch depending on the availability of the AVX-512F instruction set.

By default, data at rest encryption is disabled. For instructions on enabling it, refer to the [Blob Storage Configuration](https://ydb.tech/docs/en/reference/configuration/domains_config.md#domains-blob) section.

For more details on the implementation, refer to [ydb/core/blobstorage/dsproxy/dsproxy_encrypt.cpp](https://github.com/ydb-platform/ydb/blob/main/ydb/core/blobstorage/dsproxy/dsproxy_encrypt.cpp) and [ydb/core/blobstorage/crypto](https://github.com/ydb-platform/ydb/tree/main/ydb/core/blobstorage/crypto).