v.23.5Improvement

BACKUP Command Does Not Decrypt Data from Encrypted Disks

The BACKUP command will not decrypt data from encrypted disks while making a backup. Instead the data will be stored in a backup in encrypted form. Such backups can be restored only to an encrypted disk with the same (or extended) list of encryption keys. #48896 (Vitaly Baranov).
Encrypted backups: The BACKUP command now preserves encryption of data stored on encrypted disks by backing up the data in its encrypted form.

Why it matters

This feature ensures that backups made from encrypted disks maintain data encryption, enhancing security by preventing decryption during the backup process. It also ensures that such backups can only be restored to encrypted disks with matching or extended encryption keys, preserving data confidentiality and integrity.

How to use it

When using the BACKUP command on encrypted disks, data will automatically be backed up in encrypted form without needing additional options. To restore, ensure the target disk is encrypted with the same or an extended set of encryption keys.