A data storage layer provides enhanced data security. In one implementation, the data storage layer allows selective encryption of specific parts of data blocks, with decryption restricted to pre-determined entities. The selective encryption may be applied to parts of data blocks that are stored in blockchains, for instance, to provide fine grained control over which entities with access to the blockchain can decrypt and use the parts of the data blocks with the enhanced security.