Acra

Acra provides selective encryption, multi-layered access control, database leakage prevention, and intrusion detection capabilities in a convenient, developer-friendly package. Acra was specifically designed for web and mobile apps with centralised data storage, including with distributed, microservice-rich applications. Supports client-side and proxy-side encryption. Works for SQL databases and (limited functionality) for NoSQL databases. Acra's cryptographic design ensures that no secret (password, key, etc.) leaked from the application or database will be sufficient for decryption of the protected data chunks that originate from it. Acra minimises the leakage scope, detects unauthorised behavior, and prevents the leakage, informing operators of the incident underway.

Acra 集成了选择性加密、多层访问控制、数据库防泄漏与入侵检测功能，封装为便捷易用且对开发者友好的软件套件。Acra 专为采用集中式数据存储的Web与移动应用设计，涵盖分布式、微服务密集型应用场景，支持客户端与代理端加密。其可适配SQL数据库，对NoSQL数据库的支持功能有限。Acra 的加密设计可确保：即便应用或数据库发生密钥（密码、密钥等）泄露，也不足以解密源自该来源的受保护数据块。Acra 可缩小泄漏范围、检测未授权行为、阻止数据泄漏，并向运维人员通报正在发生的安全事件。