The algorithm name used for encryption. Matches the Name field in the EncryptionAlgorithm entity.
OptionalauthBase64-encoded authentication tag for AEAD algorithms. Only present for algorithms like AES-GCM that provide authentication. Undefined for non-AEAD algorithms like AES-CBC.
Base64-encoded encrypted data.
Base64-encoded initialization vector. Randomly generated for each encryption operation.
The UUID of the encryption key used. References the EncryptionKey entity in the database.
The encryption marker prefix (always '$ENC$'). Used for quick detection of encrypted values.
Represents the parsed components of an encrypted value string.
Encrypted values follow the format:
$ENC$<keyId>$<algorithm>$<iv>$<ciphertext>[$<authTag>]This structure allows the encryption engine to:
Example