Database encryption

Also written: transparent database encryption

Encrypting a whole database file at rest, so a copied file is useless without the key. It decrypts for every query, so record-level encryption is still needed for the most sensitive fields.