Term Kind Topic What it is
Envelope Encryption pattern Encryption Encrypting data with a locally-generated data key, then encrypting that key with a master key held in a key management service, and storing the wrapped key alongside the ciphertext.
Field-Level Encryption Application-Level Encryption pattern Encryption Encrypting specific sensitive fields in the application before they reach the datastore, so the store never holds plaintext.