Comments - Data-at-Rest Encryption Overview
Content reproduced on this site is the property of its respective owners,
and this content is not reviewed in advance by MariaDB. The views, information and opinions
expressed by this content do not necessarily represent those of MariaDB or any other party.
I'm a bit puzzled here -- there is said that 128, 192 or 256-bit keys are supported, but later AES_CTR and AES_CBC modes talk only about 128bit keys. What piece of information am I missing?
The exact wording is "the plugin will use AES with the 128-bit keys in the CTR mode for encrypting tablespace pages". Because tablespace pages are always encrypted with a 128-bit tablespace key. Which is different for every tablespace and it is generated from the user-specified key, which might be 128-, 192-, or 256-bit.