ShrouDB Engine
Veil
Search encrypted data without leaking it.
Veil runs fuzzy, prefix, and contains queries over encrypted documents — decrypting, matching, and re-encrypting in memory. The keys stay where they belong: in Cipher.
ENCRYPTED_SEARCHFUZZYPREFIXCONTAINS
Features
- Encrypted fuzzy, contains, exact, and prefix search
- Decrypt-match-reencrypt in memory — Veil never holds keys
- Embedded or remote Cipher for key operations
- Index management and rebuild commands
- Zeroization on match completion
Quickstart (standalone)
veil.toml
bind = ":7004"
[cipher]
mode = "embedded"
[keyrings.customers]
algorithm = "aes-256-gcm"terminal
$ shroudb-veil --config veil.tomlCommand reference
| Command | Args | Description |
|---|---|---|
| INDEX | <keyring> <id> <text> | Add document to encrypted index |
| FUZZY | <keyring> <query> | Fuzzy match over encrypted docs |
| CONTAINS | <keyring> <query> | Substring search |
| EXACT | <keyring> <query> | Exact-match search |
| PREFIX | <keyring> <query> | Prefix search |
Bundle into Moat
Drop Veil into a unified Moat process and it inherits the shared auth layer, storage, and telemetry — no extra wiring.
moat.toml
[engines.veil]
enabled = true
# Automatically uses embedded CipherRun Veil in production today
Free on ShrouDB Cloud up to 10k ops/month — no card required.