Always Encrypted en SQL Server
The always-enabled feature of Microsoft SQL Server 2016 CTP3 allows users to encrypt sensitive data within their applications and never reveal the encryption keys to SQL Server. An always-enabled encryption handler installed on the user's computer accomplishes this by automatically encrypting and decrypting sensitive data in the SQL Server client application. The handler encrypts data in sensitive columns before passing the data to SQL Server and then automatically rewrites the queries so that the application's semantics are preserved. Similarly, the transparent handler decrypts the data stored in encrypted database columns that are contained in the query results.