Create a cryptographic specification to define the algorithm for a cryptographic module. Customize the encryption specifications with advanced options that are available for Field Encryption Enterprise.

Before you begin

Role required: admin

Procedure

  1. On the Crypto Specifications (#) tab, click New.
    Crypto Specifications tab.
  2. On the form, fill in the fields.
    Table 1. Algorithm Definition form
    FieldDescription
    Crypto module

    Name of the selected cryptographic module populates.
    Crypto purpose

    The value is Symmetric Data Encryption/Decryption for Field Encryption Enterprise.
    Algorithm

    The value is AES for Field Encryption Enterprise.
    Operation mode

    The value is CBC for Field Encryption Enterprise.
    Size
    Possible values are 256 and 128.
    Note: 256-bit size is most secure for encryption and is used for Symmetric Data Encryption/Decryption for Field Encryption Enterprise.
    Equality preserving

    Option to enable deterministic encryption.

    Note: Selecting this option means that the encrypted value of a field should be the same when the field value remains the same.

    Option to enable Symmetric Data Encryption/Decryption with AES in Cipher Block Chaining (CBC) mode.
    Integrity

    Option to provide Integrity in GCM operation and does not apply for Field Encryption Enterprise functionality.
  3. Click Submit.

    The following example shows AES CBC-256 encryption. When Field Encryption Enterprise is active and the parent module is column_level_encryption, only Symmetric Data Encryption/Decryption AES CBC-256 applies as the crypto purpose. See Cryptographic specification for details.

    Shows the AES-CBC-256 encryption configuration options.

What to do next

Perform one of the following operations: