0

Azure SQL Server offers Transparent Data Encryption (TDE) by default, with the flick of a virtual switch:

Azure TDE

There is no option to select an algorithm and I am not using "Bring Your Own Key".

Which encryption algorithm is being used and what is the key length?

All articles I find such as this one and this one have circular references to one another with no clear answer.

Evandro de Paula
  • 2,532
  • 2
  • 18
  • 27
Widor
  • 13,003
  • 7
  • 42
  • 64

2 Answers2

3

If you run this in your SQL Azure database

select * from sys.dm_database_encryption_keys

you should see the encryption algorithm being used and the key length.

In my case I have TDE enabled in one of my databases and I can see that the key_algorithm is AES and the key_lenght is 256.

andresm53
  • 1,913
  • 6
  • 15
1

It is AES 256

See this article: https://learn.microsoft.com/en-us/azure/sql-database/transparent-data-encryption-azure-sql?tabs=azure-portal

Ahsan
  • 222
  • 3
  • 15