ENHANCED_AES_DECRYPT

Syntax

ENHANCED_AES_DECRYPT(cipher_text[, iv])

Purpose

• This function is primarily used for AES decryption, which can be enabled by using the tde_method parameter. For more information, see tde_method.

• The required privilege for this function is DECRYPT.

• cipher_text is the ciphertext to be decrypted using AES.

• [, iv] is an optional parameter that represents the initialization vector.

• The input parameter cipher_text for the decryption function ENHANCED_AES_DECRYPT must be the result generated by the ENHANCED_AES_ENCRYPT function; otherwise, it will trigger the 4334 OB_ERR_AES_DECRYPT error.

Examples

The SELECT statement uses the decryption function to return plaintext.

-- Return plaintext
SELECT ENHANCED_AES_DECRYPT(cipher_col) FROM tbl;

Direct comparison between ciphertext and its corresponding plaintext is not supported. You need to decrypt the ciphertext or encrypt the plaintext before performing the comparison.

-- After decrypting cipher_col, it is expected to match the corresponding plaintext data '12345'. However, indexes cannot be utilized.
SELECT ... FROM tbl WHERE ENHANCED_AES_DECRYPT(cipher_col) = '12345';

References

• ENHANCED_AES_ENCRYPT

• Privilege types in MySQL-compatible mode