Secure Logging for Irrefutable Administration

Disclose herein is a method for protecting sensitive data (D) in an entry of a log file for later audit, comprising: - encrypting the sensitive data (D) in the log entry by using a random cryptographic key (A), - for each auditor authorized to access the log entry, encrypting the random cryptographic key (A) by using an auditor's personal cryptographic key (K), and - for each auditor not authorized to access the log entry, encrypting a fake cryptographic key (H(A) having the same properties as the random cryptographic key (A) by using an auditor's personal cryptographic key (K).