For AI agents: a documentation index is available at https://www.mongodb.com/pt-br/docs/llms.txt — markdown versions of all pages are available by appending .md to any URL path.
See how MongoDB 9.0 delivers up to 2x higher throughput.
MongoDB Branding Shape
Register now >
Docs Menu
Docs Home
/
Development
/
In-Use Encryption
Docs Home
/
Development
/
In-Use Encryption
Docs Home
/
Development
/
In-Use Encryption

Cryptographic Primitives

MongoDB encrypts all fields in Queryable Encryption and CSFLE with the AEAD AES-256-CBC encryption algorithm.

  • With Queryable Encryption, ciphertext is always non-deterministic.

  • With CSFLE, if you specify deterministic encryption for a field, your application passes a deterministic initialization vector to AEAD.

  • With CSFLE, if you specify random encryption for a field, your application passes a random initialization vector to AEAD.

Note

Authenticated Encryption

MongoDB uses the encrypt-then-MAC approach to perform authenticated encryption. Both Queryable Encryption and CSFLE use the HMAC-SHA-256 algorithm to generate your MAC.

Back
Compatibility
Next
Keys and Key Vaults
Rate this page