- Security >
- Encryption >
- In-Use Encryption >
- Introduction >
- Reference >
- Cryptographic Primitives
Cryptographic Primitives¶
MongoDB encrypts all fields in with the AEAD AES-256-CBC encryption algorithm.
- If you specify deterministic encryption for a field, your application passes a deterministic initialization vector to AEAD.
- If you specify random encryption for a field, your application passes a random initialization vector to AEAD.
Note
Authenticated Encryption
MongoDB uses the encrypt-then-MAC approach to perform authenticated encryption. MongoDB
uses the HMAC-SHA-512 algorithm to generate your
MAC.