How does ClearRun encrypt stored receipts?
The stored copy of each receipt's content (the input, the output and the verdict) is encrypted with AES-256-GCM. The hashes stay readable so receipts can be checked without decrypting anything.
Last updated
What is encrypted
The receipt payload and queued receipt jobs. Each receipt names the key used in encKeyId.
What is not
The hashes, ids, time and signature. Those are what public checks use, and they don't contain your text.