article
Encrypted email column, and the scheduler could no longer find anyone by email
A random IV per encryption meant my lookups were searching for a value that never existed; the follow-up scan works but decrypts the table on every sign-in, and a forgiving decrypt now hides a wrong key.
Read more