Does Atlas allow us to implement queryable encryption CSFLE?

[John_Cantu]

Greetings,

I would like to test out “Queryable Encryption CSFLE”. Does Atlas allow us to implement queryable encryption CSFLE?

Thanks,

John

[Aasawari (Aasawari Sahasrabuddhe)]

Hello @John_Cantu, and a warm welcome to the MongoDB Community forum!

I wanted to point out that according to the documentation’s compatibility section on Client-Side Field Level Encryption, Atlas does indeed support encryption. I hope this addresses your query.

If there’s anything more specific you’re seeking, perhaps related to CSFLE support within the Atlas UI, please let us know!

Best Regards
Aasawari

[John_Cantu]

Hello Aasawari,

What gets me, and probably most others, confused is Mongo calling the new release “Queryable Encryption” vs regular “automatic CSFLE.” I wish Mongo just called it CSFLE. if you use it in Mongo 7, it has the new queryable encryption feature. If it is different, then don’t associate it with CSFLE.

I found this that specifically shows “queryable encryption” is supported in Atlas:

Considerations

Compatibility

The following table shows which MongoDB server products support which Queryable Encryption mechanisms:

Product Name	Supports Automatic Encryption	Supports Explicit Encryption
MongoDB Atlas	Yes	Yes
MongoDB Enterprise Advanced	Yes	Yes
MongoDB Community Edition	No	Yes

[Aasawari (Aasawari Sahasrabuddhe)]

Hi @John_Cantu

I understand your concern and I believe the response by @Cynthia_Braund would help to clarify the difference that CSFLE and Queryable Encryption have.

Queryable Encryption & Client-Side Field Level Encryption

I am studying about “Queryable Encryption” and “Client-Side Field Level Encryption”. But to me, these two look so similar. Queryable Encryption Queryable Encryption is a feature of MongoDB that enables a client application to encrypt data before transporting it over the network using fully randomized encryption, while maintaining queryability. Sensitive data is transparently encrypted and decrypted by the client and only communicated to and from the server in encrypted form. The security gu…

Let us know if we have been able to answer your question.

Regards
Aasawari

[John_Cantu]

Good morning. I don’t see Cynthia’s response. please point me to it. thanks

[Aasawari (Aasawari Sahasrabuddhe)]

Hi @John_Cantu

I would recommend reading through the below link

Queryable Encryption & Client-Side Field Level Encryption

Hi Kim and thank you for your question. You are correct that in the current Public Preview the difference between the two is how the data is encrypted. To make a field queryable on an exact match in Client-Side Field Level Encryption we use deterministic encryption. Deterministic Encryption is strong encryption for most data but if you have fields that are low cardinality, meaning very few values possible, it can be subject to inference attacks. With Queryable Encryption the data is always e…

and let us know if you have any further questions.

Thanks
Aasawari

[John_Cantu]

Good morning. I don’t see Cynthia’s response. please point me to it. thanks