ENHANCED_AES_DECRYPT

Syntax

ENHANCED_AES_DECRYPT(cipher_text[, iv])

Purpose

• This function is mainly used for column encryption. To enable column encryption, set the tde_method parameter to ENHANCED_AES. For more information, see tde_method.

• You must have the DECRYPT privilege to use this function.

• cipher_text specifies the ciphertext to be decrypted.

• [, iv] is an optional parameter that specifies the initialization vector.

• The ENHANCED_AES_DECRYPT function can be used only to decrypt ciphertext generated by the ENHANCED_AES_ENCRYPT function. Otherwise, the function returns an error of the OB_ERR_AES_DECRYPT type.

Examples

The following example shows how to use the ENHANCED_AES_DECRYPT function to return the plaintext of a column.

-- Return the plaintext.
SELECT ENHANCED_AES_DECRYPT(cipher_col) FROM tbl;

You can compare the ciphertext with the plaintext directly. However, the comparison returns false. To compare the ciphertext with the plaintext, you must decrypt the ciphertext or encrypt the plaintext.

-- Decrypt the ciphertext in the cipher_col column and compare it with the plaintext data '12345'. However, you cannot use an index for this comparison.
SELECT ... FROM tbl WHERE ENHANCED_AES_DECRYPT(cipher_col) = '12345';

References

ENHANCED_AES_ENCRYPT

Privilege types in MySQL mode