Hi, Cesar!

On Dec 15, Cesar Hernandez wrote:
> 
> Thanks Sergei!
> 
> So the database is encrypted by using AES-128-CBC or AES-128-CRT, right?
> Can I use AES-256-CBC?

No. Each tablespace is encrypted with a different per-tablespace key.
This key is 128 bit. It's generated by encrypting a random 128-bit
nonce with the user-specified key.

So, if you specify a 256-bit key in the file_key_manager plugin,
this 256-bit key will be used to generate the 128-bit tablespace key.

The tablespace itself will be encrypted using the 128-bit key.

Regards,
Sergei
Chief Architect MariaDB
and secur...@mariadb.org

_______________________________________________
Mailing list: https://launchpad.net/~maria-discuss
Post to     : maria-discuss@lists.launchpad.net
Unsubscribe : https://launchpad.net/~maria-discuss
More help   : https://help.launchpad.net/ListHelp

Reply via email to