Encrypting paste service.
-
Fully in-memory for ephemerality and performance by default
-
AEAD-encryption with per-paste random key and nonce using 128 bit AES-GCM
-
Burn after reading, no explicit overwriting is needed because of the encryption
-
Additional scrambling of encryption keys to defend against current and future SPECTRE and MELTDOWN type attacks in hosted deployments
-
Pastes can be optionally stored to disk with metadata in SQLite database