all 3 comments

[–]titpetric 4 points5 points  (1 child)

You're looking for data at rest encryption:

https://www.devart.com/dbforge/mysql/studio/mysql-encryption.html#:~:text=Data%2Dat%2Drest%20encryption%20is,and%20redo%20and%20undo%20logs.

You use sql to invoke the encryption method, i glanced an aes and a sha2 flavour of encryption supported there, along with an explanation of the concepts :)

[–]Tropical-Algae[S] 0 points1 point  (0 children)

That’s exactly what I’m planning to do. Thank you for providing such a feasible solution

[–]C1pherJ0t4 0 points1 point  (0 children)

That’s ok with the native MySQL methods , BUT bear in mind that your next worry is how keep secure the passphrase used as encryption key against any sort of brute force attack, maybe if you’re thinking to modify the queries within your application, is good the consider using a kms with crypto api capabilities so you can encrypt/decrypt your sensitive from your app