MySQL Blog Archive
For the latest blogs go to blogs.oracle.com/mysql
Deprecating Weaker Encryption Functions

A Quick Security Update

Starting with MySQL 5.7.6, the following functions are now deprecated:

DES (Data Encryption Standard) is known to be less secure and slower than other available encryption methods. There are also many well known attack methods that can be used against it.

AES (Advanced Encryption Standard) was the chosen successor to DES. It provides better security and performance, thus obsoleting the older DES based functions. MySQL provides the following AES functions:

When using the AES functions, you can also use the block_encryption_mode session variable to configure the following AES parameters:

  • Block encryption mode
  • Key size
  • Initialization vector

We recommend that users stop using the deprecated DES based functions and switch to AES functions as soon as possible.

If you have any questions or comments about these functions, please let us know! You can leave a comment here on the blog post or in a support ticket.

As always, THANK YOU for using MySQL!