xVaultDB: Encrypted Split Database

The Problem

Database breaches expose entire tables of sensitive records. Encryption at rest still gives the database server full access to plaintext during query execution.

Traditional database encryption protects data on disk but decrypts everything in memory when the server processes queries. A compromised database server, a leaked backup, or an insider with admin credentials gets access to every row in every table simultaneously.

Column-level encryption and tokenization add complexity but still concentrate trust in a single system. The encryption keys live on the same infrastructure as the data, creating a single point of catastrophic failure.

The Old Way

The PRIVATE.ME Solution

xVaultDB applies XorIDA threshold splitting at the row level. Each record is serialized, HMAC-signed for integrity, and split into N shares distributed across independent storage backends.

No single backend holds enough information to reconstruct any record. An attacker who compromises one storage node gains zero information about the original data — this is information-theoretic security, not computational.

Reconstruction requires K-of-N shares with HMAC verification before reassembly. Tampered shares are detected and rejected before they can corrupt the reconstruction process.

The New Way

How It Works

Each database row passes through a structured pipeline: serialization, validation, XorIDA splitting across N storage nodes, HMAC verification, and threshold reconstruction on read.

Use Cases

Integration

import { splitRow, querySecure } from '@private.me/xvaultdb';

// Split a patient record across 3 backends (2-of-3 threshold)
const shares = await splitRow(
  { id: 'pat-001', name: 'Jane Doe', ssn: '***-**-1234' },
  ['backend-a.internal', 'backend-b.internal', 'backend-c.internal'],
  { n: 3, k: 2 }
);

// Query with threshold reconstruction
const result = await querySecure('pat-001', shares);

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xVaultDB?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xVaultdb generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases