Column Encryption in SAP Sybase IQ

SAP Sybase IQ supports user-encrypted columns.

Strong encryption of the SAP Sybase IQ database file uses a 128-bit algorithm and a security key. The data is unreadable and virtually undecipherable without the key. The algorithm supported is described in FIPS-197, the Federal Information Processing Standard for the Advanced Encryption Standard.

SAP Sybase IQ supports user-encrypted columns with the AES_ENCRYPT and AES_DECRYPT functions and the LOAD TABLE ENCRYPTED clause. These functions permit explicit encryption and decryption of column data via calls from the application. Encryption and decryption key management is the responsibility of the application.

Certain database options affect column encryption.

• Licensing Requirements for Column Encryption
  The Advanced Security Option (IQ_SECURITY) is required to use user-encrypted columns with SAP Sybase IQ.
• Definitions of Encryption Terms
  Definitions of terms used when describing encryption of stored data.
• Data Types for Encrypted Columns
  The data types supported for encrypted columns and working with these data types.
• AES_ENCRYPT Function [String]
  Encrypts the specified values using the supplied encryption key, and returns a VARBINARY or LONG VARBINARY.
• AES_DECRYPT Function [String]
  Decrypts the string using the supplied key, and returns, by default, a VARBINARY or LONG BINARY, or the original plaintext type.
• LOAD TABLE ENCRYPTED Clause
  The LOAD TABLE statement supports the column-spec keyword ENCRYPTED.
• String Comparisons on Encrypted Text
  If data is case-insensitive, or uses a collation other than ISO_BINENG, you must decrypt ciphertext columns to perform string comparisons.
• Database Options for Column Encryption
  Certain SAP Sybase IQ database option settings affect column encryption and decryption; the default settings are not optimal for most column encryption operations.
• Encryption and Decryption Example
  An example using the AES_ENCRYPT and AES_DECRYPT functions, written in commented SQL.