Hash function in SAP IQ

[SAPSupport]

Dear SAP Team,
We need to do column level encryption testing basis below methods.

Method 1: AesEncrypt & AesDerypt function based Encryption 
Create views on the base tables and implement AES encryption and decryption functions (AesEncrypt and AesDecrypt) within these views.

Method 2: Hash-Based Encryption
Create views on the base tables and apply HASH functions, such as SHA-1 or SHA-256, within these views.
We need to know how second approach can be implemented here. Can we use hash functions in IQ and since it is not native to IQ how will be the performance?.

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Dear Customer ,

Regarding Method 1, I tested HASH function in IQ.

Example : "select UPPER(HASH(CAST((Surname) as VARCHAR(150)), 'SHA-256')) from employees where EmployeeID >= 120"

I can confirm it is not IQ native. The query plan generated is SQL Anywhere plan, not IQ.

See KBA 2271520 How to know if a query is processed by SAP IQ or SQL Anywhere - SAP IQ

Thus performance may be impacted (KBA 2305300 - Hash function in SAP IQ)

The alternative and recommended solution is Method 1 :

Use IQ column encryption with native functions AES_ENCRYPT and AES_DECRYPT 

See

Column Encryption in SAP IQ

KBA 2531882 - How to set up column encryption in SAP IQ 16.x  

Kind Regards,
SAP Support