CipherStash Proxy 2.1.21 Released - Array Index Mode for STE-VEC

[coderdan]

We're pleased to announce CipherStash Proxy 2.1.21, which introduces fine-grained control over how arrays are indexed in encrypted JSONB data.

Array Index Mode Configuration

This release adds array_index_mode configuration for STE-VEC indexes, giving you control over which array selectors are generated during indexing. This can help optimize index size and query performance for your specific use case.

Configuration Options

Value	Description
"all" (default)	Generates all selector types: item, wildcard, and positional
"none"	Disables array indexing entirely
{...}	Object form for fine-grained control over individual selector types

Preset Values

For most use cases, the preset values provide the simplest configuration:

-- Default behavior: index all array selector types
SELECT eql_v2.add_search_config(
  'events',
  'payload',
  'ste_vec',
  'jsonb',
  '{"prefix": "events/payload", "array_index_mode": "all"}'
);

-- Disable array indexing if you don't query arrays
SELECT eql_v2.add_search_config(
  'events',
  'payload',
  'ste_vec',
  'jsonb',
  '{"prefix": "events/payload", "array_index_mode": "none"}'
);

Fine-Grained Control

For advanced use cases, you can enable specific selector types:

SELECT eql_v2.add_search_config(
  'events',
  'payload',
  'ste_vec',
  'jsonb',
  '{"prefix": "events/payload", "array_index_mode": {"item": true, "wildcard": true, "position": false}}'
);

Selector	JSONPath	Use Case
item	[@]	Required for jsonb_array_length and jsonb_array_elements
wildcard	[*]	Standard JSONPath wildcard for iterating array elements
position	[0], [1], etc.	Positional access to specific array indices

Note

Existing configurations are unaffected. The default value of "all" preserves backwards compatibility with previous behavior.

Other Changes

• Updated cipherstash-client to v0.33.0

Upgrade

Upgrade to 2.1.21 by pulling the latest Docker image:

docker pull cipherstash/proxy:2.1.21

Or visit the releases page for other installation options.