Column Level and Cell Level Encryption
The encryption and decryption functions can support two ways of
using data encryption features, namely column level and cell
level encryption.
- Column level encryption means that all values in a given column
are encrypted with the same password (which can be a word or phrase),
the same cipher, and the same cipher mode.
Users of this form of encryption should consider not using the hint feature of these functions, but instead store a mnemonic hint for remembering the password in some other location. Otherwise, the same hint will occupy disk space in every row that contains an encrypted value.
- Cell level encryption means that within a column of encrypted
data many different passwords (or different ciphers or cipher modes)
are used.
This use of encryption is also called row-column level or set-column level encryption. Compared to column-level encryption, this makes the task of data management more complex, because if different passwords are required for decrypting different rows of the same table, it is not possible to write a single SELECT statement to fetch all the decrypted data. In some situations, however, individual users may need this technique to protect personal data.