Learn the "why" behind slow queries and how to fix them in our 2-Part Webinar.
Register now >
Docs Menu
Docs Home
/
Development
/
In-Use Encryption
Docs Home
/
Development
/
In-Use Encryption
Docs Home
/
Development
/
In-Use Encryption

Cryptographic Primitives

MongoDB encrypts all fields in CSFLE with the AEAD AES-256-CBC encryption algorithm.

  • If you specify deterministic encryption for a field, your application passes a deterministic initialization vector to AEAD.

  • If you specify random encryption for a field, your application passes a random initialization vector to AEAD.

Note

Authenticated Encryption

MongoDB CSFLE uses the encrypt-then-MAC approach to perform authenticated encryption. Both Queryable Encryption and CSFLE use the HMAC-SHA-256 algorithm to generate your MAC.

Back

CSFLE Limitations

Next

Keys and Key Vaults