Term Kind Topic What it is
Envelope Encryption pattern Key Management Encrypting data with a locally generated data key, then encrypting that key with a master key held in a key management service.
Signing Boundary Policy Policy at the HSM, Constrained Signing pattern Key Management Enforcing transaction policy at the hardware signing boundary rather than in application code, so that a compromised application cannot obtain an arbitrary signature.