Tablespace encryption uses a two tier encryption key architecture, consisting of
- a master encryption key and
- a tablespace keys.
When a tablespace is encrypted, a tablespace key is encrypted and stored in the tablespace header.
The decrypted version of a tablespace key never changes, but the master encryption key can be changed as required. This action is referred to as master key rotation.
A secure and robust encryption key management solution is critical for security and for compliance with various security standards
Tablespace encryption supports the Advanced Encryption Standard (AES) block-based encryption algorithm.