Enabling table encryption

Table encryption must be enabled and configured at database creation time. You must re-create the database with table encryption enabled if your database does not have table encryption enabled, or if you have database encryption in effect.

To create a database with simple table encryption (SQL)

  • Create a database using the CREATE DATABASE statement, but do not include key or algorithm settings.

    The following command creates the database new.db with simple encryption enabled for tables:

    CREATE DATABASE new.db ENCRYPTED TABLE;

    Later, when you encrypt a table in this database, the simple encryption algorithm is used.

To create a database with strong table encryption (SQL)

  • Create a database with the CREATE DATABASE statement, and specify a key and an encryption algorithm.

    The following command creates the database new.db with strong encryption enabled for tables using the key abc, and the AES256_FIPS encryption algorithm:

    CREATE DATABASE new.db
    ENCRYPTED TABLE
    KEY abc
    ALGORITHM AES256_FIPS;

    Later, when you encrypt a table in this database, the AES256_FIPS algorithm is used, as well as the key abc.

To create a database with simple table encryption (command prompt)

  • Create a database with the dbinit -et option, but do not include a key or encryption algorithm.

    The following command creates the database new.db with simple encryption enabled for tables:

    dbinit new.db -et

    Later, when you encrypt a table in this database, the simple encryption algorithm is used.

To create a database with strong table encryption (command prompt)

  • Create a database with the dbinit -et and -ek options, and specifying a key and an encryption algorithm.

    The following command creates the database new.db with strong encryption enabled for tables that use the key abc, and the AES256_FIPS encryption algorithm:

    dbinit new.db -et -ek abc -ea AES256_FIPS

    Later, when you encrypt a table in this database, the AES256_FIPS algorithm is used, as well as the key abc.

See also