Encryption algorithms supported by Synapse Analytics

Question

Hi, which are the encryption algorithms supported by a Synapse Analytics SQL pool? I need to encrypt some table columns by using a T-SQL scripts. Thanks

Answer 1

Hello pmscorca,

TDE protects data and log files, using AES and Triple Data Encryption Standard (3DES) encryption algorithms. Reference document: https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption?view=sql-server-ver15 The default setting for TDE is that the DEK is protected by a built-in server certificate. The built-in server certificate is unique for each server and the encryption algorithm used is AES 256.

Synapse supports data encryption in transit with TLS v1.2, using AES 256 encryption(default)

Reference documents: https://learn.microsoft.com/en-us/azure/synapse-analytics/guidance/security-white-paper-data-protection#data-in-transit

https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?view=azuresql&tabs=azure-portal

How to choose the right algorithm:

T-SQL scipts:
https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/encrypt-a-column-of-data?view=sql-server-ver16 I hope this answers your question.