en-decrypt

Use case

Encrypt emails at rest

If an email is a secret, do not leave it as a plaintext unique column.

The stored value is not searchable. Store a keyed hash for login lookup and the encrypted email for display. Encrypt once; update in place if it changes (free).