How do i go about encrypting data before saving to stable memory

[paulyoung]

I think at the moment you can either:

1. Encrypt the data before it reaches the IC so that the key isn’t at risk of being compromised (e.g. by a node provider)
   • IC Vault does this in the browser
2. Encrypt the data in a canister, with the above caveat about exposing the keys
   • Perhaps using something like make_rng from ic-auth-tokens along with a pure Rust cryptography crate
3. Wait for Threshold Key Derivation - Privacy on the IC