Question

I use MySQL extensively, but it doesn’t support database-level encryption without some external library.

What databases come with db-level support built-in, and if you know MySQL enough to compare, how close is its syntax to MySQL. I’d obviously prefer not to re-learn everything.

I also use PDO extensively to handle sql injections, so ideally PDO-friendly is preferred.

Answer 1

Absolutely.

SELECT *, AES_DECRYPT(`field`, 'key') as `decrypted` FROM enc WHERE AES_DECRYPT(`field`, 'key')='$input'

I am not sure if there’s a way of only calling AES_DECRYPT once per field.