Column Encryption

[pimeys]

SQL Server supports Column Encryption (CEK), and we should probably implement some kind of support for it in Tiberius.

The client should take the needed keys, and transparently encrypt/decrypt columns if needed.

[toby-meyer]

I would like to second this request. Here is some additional information on MSFT's CEK solution ("Always Encrypted"):

High Level How it Works Overview of Key Management Documentation Hub Reference: Example of implementation as PR for Tedious Project (Node TDS Driver) Implementation example: JDBC

Enabling CEK for MSFT/Azure scenarios would make Prisma a more optimal choice for many types of line-of-business applications in multiple verticals dependent upon enhanced encryption requirements.

Thanks much for your consideration!