You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
One of the data formats of `BSON binary subtype 6 <https://github.com/mongodb/specifications/tree/master/source/client-side-encryption/subtype6.rst>`_, representing an encoded BSON document containing
99
99
encrypted ciphertext and metadata.
100
100
101
-
FLE 1
102
-
FLE 1 is the first version of Client-Side Field Level Encryption. FLE 1 is almost entirely client-side with the exception of server-side JSON schema.
101
+
FLE
102
+
FLE is the first version of Client-Side Field Level Encryption. FLE is almost entirely client-side with the exception of server-side JSON schema.
103
103
104
-
FLE 2
105
-
FLE 2 the second version of Client-Side Field Level Encryption. Data is encrypted client-side. FLE 2 supports indexed encrypted fields, which are further processed server-side.
104
+
Queryable Encryption
105
+
Queryable Encryption the second version of Client-Side Field Level Encryption. Data is encrypted client-side. Queryable Encryption supports indexed encrypted fields, which are further processed server-side.
106
+
107
+
In-Use Encryption
108
+
Is an umbrella term describing the both FLE and Queryable Encryption.
106
109
107
110
encryptedFields
108
-
A BSON document describing the FLE 2 encrypted fields. This is analogous to the JSON Schema in FLE 1. The following is an example encryptedFields in extended canonical JSON:
111
+
A BSON document describing the Queryable Encryption encrypted fields. This is analogous to the JSON Schema in FLE. The following is an example encryptedFields in extended canonical JSON:
109
112
110
113
.. code::
111
114
@@ -642,13 +645,13 @@ encryptedFieldsMap
642
645
643
646
``encryptedFieldsMap`` maps a collection namespace to an ``encryptedFields``.
644
647
645
-
``encryptedFieldsMap`` only applies to FLE 2.
648
+
``encryptedFieldsMap`` only applies to Queryable Encryption.
646
649
647
650
If a collection is present on both the ``encryptedFieldsMap`` and ``schemaMap``, libmongocrypt_ will error on initialization. See :ref:`fle2-and-fle1-error`.
648
651
649
652
If a collection is present on the ``encryptedFieldsMap``, the behavior of ``CreateCollection()`` and ``Collection.Drop()`` is altered. See :ref:`fle2-createcollection-drop`.
650
653
651
-
Automatic encryption in FLE 2 is configured with the ``encryptedFields``.
654
+
Automatic encryption in Queryable Encryption is configured with the ``encryptedFields``.
652
655
653
656
If a collection is not present on the ``encryptedFields`` a server-side collection ``encryptedFields`` may be used by libmongocrypt_.
654
657
Drivers MUST include the following in the documentation for MongoClient:
@@ -663,10 +666,10 @@ See `Why is bypassQueryAnalysis needed?`_.
663
666
664
667
.. _fle2-createcollection-drop:
665
668
666
-
FLE 2 Create and Drop Collection Helpers
667
-
----------------------------------------
669
+
Queryable Encryption Create and Drop Collection Helpers
0 commit comments