What is the MySQL equivalent of SQL Server 2016 Always Encrypted technology or is there anything similar in MySQL that can act as AE?

  • 2
    Instead of referencing a branded feature of MS SQL Server, which may be unfamiliar to MySQL experts, you may want to describe the functionality that you are trying to achieve.
    – mustaccio
    Commented Dec 20, 2016 at 19:26

2 Answers 2


The Always Encrypted feature provides end-to-end encryption, which encrypts data both in-flight, and at rest. Data is encrypted & decrypted on the client at the driver. Data is encrypted everywhere except for on he client machine. This is one step beyond encryption at rest (which is handled in SQL Server by Transparent Data Encryption).

Other RDBMS products do not have a feature which is quite the same. To do something similar on another RDBMS, you could perform encryption on the client within your application, and then send data in its encrypted format to the database.

Also, with deterministic encryption, SQL Server Always Encrypted allows point lookups, equality joins, grouping, and indexing on encrypted columns, which is often not handled by home-grown encryption.


MySQL 5.7 has https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html

Also, search for "encrypted at rest" - MariaDB-10.1.4.

  • 1
    SQL Server's Always Encrypted feature is more than just "encryption at rest". It's more accurately "end to end encryption" since all encryption/decryption is done at the client, not the server
    – AMtwo
    Commented Dec 26, 2016 at 0:29
  • Oracle brags about what they have (for MySQL); I can't attest to whether it is effectively "end to end".
    – Rick James
    Commented Dec 26, 2016 at 0:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.