AES 256 data encryption on Mysql

Question

Is there a way to encrypt the whole data of a mysql DB using the AES 256 symmetric encryption method without encrypting the data manually using AES_ENCRYPT ?

This article explains about the same functionality in MsSql databases

• Michael Hampton: Encrypt the hard drive?
• Yaron U.: Hmm... I prefer encrypting the data of the db and not the whole HD if it's possible
• Cristian Ciupitu: You could store the MySQL database on a separate partition and encrypt only that partition.
• Yaron U.: Correct me if I'm wrong - but, encrypting the partition itself helps only if someone tries to read the data without being already logged to the OS.. right?
• Markus W Mahlberg: What language are you using?

Answer 1

MySQL doesn't support data file encryption natively, but there are ways to do it. There is a product called Vormetric Transparent Encryption. Read info about it here: http://www.vormetric.com/data-security-solutions/use-cases/database-encryption But if you want to actually use SQL for this purpose, newer versions support AES_ENCRYPT() and AES_DECRYPT() (the official AES standard). You can read about the two functions here, in the mysql 5.x manual: https://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html#function_aes-encrypt

So basically you can encrypt the data prior to the insert query. MySql wont know the difference. also, you will have to decrypt it when extracting any data.

Answer 2

XtraBackup provides such a functionality

• Yaron U.: sounds interesting. is it possible for live db and not only for backups?
• da_didi: I think you are looking for filesystem encryption.
• da_didi: I just found this presentation, pls read slide 53 and following: yassl.com/files/yassl_securing_mysql.pdf