Overview
What this challenge is about.
Build envelope encryption in Go for a B2B SaaS document service, then migrate 50GB to earn your verifiable certificate.
The scenario
The SaaS (around EUR 8M ARR, GDPR-regulated, two enterprise customers under contractual CMK requirements) needs this shipped before a renewal closes in 8 weeks.
The Brief
What you'll do, and what you'll demonstrate.
Ship envelope-encryption with customer-managed keys for a 4TB document service, prove tamper resistance via AEAD, and produce an operational runbook.
Earning criteria — what you'll demonstrate
- Design and ship envelope encryption with KMS-held KEKs
- Use AEAD correctly with Associated Data binding objects to their keys
- Implement key rotation without re-encrypting all underlying data
- Document encryption operations for a non-crypto SRE team
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Applied Cryptography
Master · Security
Strong alignment
This challenge maps to Applied Cryptography at the Master level. It sharpens the same practical skills your coursework expects — but in a real industry context with actual constraints and deliverables.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Applied Cryptography
Apply applied cryptography to solve real industry problems and demonstrate production-level capability.
- Aead
Apply aead to solve real industry problems and demonstrate production-level capability.
- Key Management
Apply key management to solve real industry problems and demonstrate production-level capability.
- Go
Apply go to solve real industry problems and demonstrate production-level capability.
- Aws
Deploy and manage infrastructure and services on Amazon Web Services.
- Documentation
Apply documentation to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: