pii_cipher

https://github.com/selvachezhian/pii_cipher

PiiCipher lets you search encrypted PII columns in ActiveRecord without ever storing or querying plaintext. It generates HMAC-SHA256 blind indexes alongside your ciphertext — trigram arrays for partial (substring) searches and single hashes for exact-match lookups. The hash functions run in a native Rust extension for performance. Query interception is transparent: call `where` as normal and PiiCipher rewrites the query against the blind index automatically.