PostgreSQL extension for transparent column-level encryption using AES, with custom encrypted data types (encrypted_text, encrypted_bytea) and a two-tier key management model (KEK/DEK).

Block-based encrypted file stream for .NET — each block encrypted independently with AES-256-GCM, enabling random read/write at any position without decrypting the entire file. Drop-in Stream replacement with pluggable crypto, parallel IO, and 1800+ tests.