Methods for encryption validation

A computer-implemented method comprising:

• receiving, by one or more processors, a data set comprising a set of character strings in a table of columns and rows;
• storing, by the one or more processors, the data set in a temporary data store;
• calculating, by the one or more processors, a benchmark entropy value for the set of character strings based at least in part on a set of possible characters for corresponding positions of the set of character strings;
• calculating, by the one or more processors, a set of entropy values for the columns, the calculating of the set of entropy values for the columns including calculating an observed entropy value for a column, the column corresponding to a position in the set of character strings, the calculating of the observed entropy value for the column being based at least in part on values in the position in the set of character strings;
• comparing, by the one or more processors, the set of entropy values for the columns to the benchmark entropy value;
• outputting, by the one or more processors, an encryption indication for the data set based at least in part on the comparison;
• and
• selectively, by the one or more processors, writing the data set to a persistent data store based on the encryption indication, the selectively writing of the data set comprising:
• determining, by the one or more processors, whether the data set is sufficiently encrypted based on whether the observed entropy value is within a threshold of the benchmark entropy value;
• in response to determining that the data set is insufficiently encrypted, encrypting, by the one or more processors, the data set prior to writing, by the one or more processors, the encrypted data set to the persistent data store;
• and
• after encrypting the data set in response to determining that the data set is insufficiently encrypted, writing, by the one or more processors, the encrypted data set to the persistent data store, the writing of the encrypted data set to the persistent data store enabling access of the encrypted data set to a cloud client.

A non-transitory computer-readable medium storing code, the code comprising instructions executable by at least one processor to perform operations comprising:

• receiving, by the at least one processor, a data set comprising a set of character strings;
• storing the data set in a temporary data store in a table of columns and rows;
• calculating, by the at least one processor, a benchmark entropy value for the set of character strings based at least in part on a set of possible characters for corresponding positions of the set of character strings;
• calculating, by the at least one processor, a set of entropy values for the columns, the calculating of the set of entropy values for the columns including calculating an observed entropy value for a column, the column corresponding to a position in the set of character strings, the calculating of the observed entropy value for the column being based at least in part on values in the position in the set of character strings;
• comparing, by the at least one processor, the set of entropy values for the columns to the benchmark entropy value;
• outputting, by the at least one processor, an encryption indication for the data set based at least in part on the comparison;
• and
• selectively writing, by the at least one processor, the data set to a persistent data store based on the encryption indication, the selectively writing of the data set comprising:
• determining, by the at least one processor, whether the data set is sufficiently encrypted based on whether the observed entropy value is within a threshold of the benchmark entropy value;
• in response to determining that the data set is insufficiently encrypted, encrypting, by the at least one processor, the data set prior to writing, by the at least one processor, the encrypted data set to the persistent data store;
• and
• after encrypting the data set in response to determining that the data set is insufficiently encrypted, writing, by the at least one processor, the encrypted data set to the persistent data store, the writing of the encrypted data set to the persistent data store enabling access of the encrypted data set to a cloud client.