Engine-level encryption is cryptographic encoding and decoding of data that is executed within a database engine.
Encryption can be executed at many locations, including appplication servers, database management system (DBMS) servers and appliances. In a DBMS like Oracle, MS-SQL or MySQL, database operations are conducted in an operation engine. Such DBMS also have a storage engine. Engine-level encryption occurs in an encryption engine inserted between the operation engine and the storage engine.
Database encryption is categorized in a number of ways in addition to the location of its execution. It can be categorized according to the unit of encryption as well, for example as table-level or column-level encryption. Engine-level encryption may be used to encrypt any unit of encryption. Column-level encryption in an engine-level database encryption product indicates that the data is encrypted on the level of columns, rather than tables, rows or some other unit.
Engine-level encryption software products include Oracle TDE, MS-SQL TDE and MyDiamo.