Forum Discussion

Pratik Khandelwal's avatar
Pratik Khandelwal
Copper Contributor
Apr 20, 2020
Solved

Encryption of data stored in Azure Tables (Azure Storage)

Hello folks,

 

Me and my team have been looking for a good way to store encrypted data in Azure Tables. The main objective here is to avoid someone with access to database to be able to read that data on the storage explorer. 

 

We have looked at encrypting it on our server logic before saving it to the db, but the solution is causing a performance hit on the application.

 

Is there a way to achieve this directly on the Azure Tables? If it isn't, should there be? Or what else would be the best way to achieve this?

 

Thanks!

  • Klaas Langhout's avatar
    Klaas Langhout
    Apr 21, 2020

    Pratik KhandelwalHi Pratik, if someone has access to read the table, then they also have the ability to decrypt the service side encryption we use.  As you point out, encrypting client side will cause a perf hit.  We currently only support Account key and SAS authorization to tables.  A mitigation would be to encryption just a portion of the payload that is in a row (to encrypt the sensitive portion only).

1 Reply

  • Klaas Langhout's avatar
    Klaas Langhout
    Icon for Microsoft rankMicrosoft
    Apr 21, 2020

    Pratik KhandelwalHi Pratik, if someone has access to read the table, then they also have the ability to decrypt the service side encryption we use.  As you point out, encrypting client side will cause a perf hit.  We currently only support Account key and SAS authorization to tables.  A mitigation would be to encryption just a portion of the payload that is in a row (to encrypt the sensitive portion only).

Resources