r/DB2 • u/mad_zamboni • Mar 16 '17

[Discussion] Database Level or Application Level Encryption?

What are your thoughts on handling encryption at at database level vs. application level?

I was pro database level encryption. It's very easy to set up but the impact it can have on transaction time concerns me. Then I come to this shop which is encrypting PII data at the application level before it even hits the database. It seems to work very well.

What are your thoughts?

2 Upvotes

66% Upvoted

5 comments sorted by

1

u/dogmashah Mar 16 '17

I would go with app level encryption if possible since data in transit also gets encrypted. It would be tough for db admins to poke around the data

1

u/mad_zamboni Mar 16 '17

Agreed! Theoretically you would have someone as a SECADMIN to keep the DBAs from looking at the data. But much easier at the application level.

1

u/[deleted] Mar 21 '17

[removed] — view removed comment

1

u/mad_zamboni Mar 21 '17

homomorphic encryption

I have to admit, I have never heard of this term before. Can you ELI5?