For information about data encryption, see "Encrypting databases on disk" in the Derby Developer's Guide.
When you create a new database, the bootPassword=key attribute must be combined with the create=true and dataEncryption=true attributes.
When you configure an existing unencrypted database for encryption, the bootPassword=key attribute must be combined with the dataEncryption=true attribute. For an existing, unencrypted database for which authentication and SQL authorization are both enabled, only the database owner can perform encryption. Please see "Enabling user authentication" and "Setting the SQL standard authorization mode" in the Derby Developer's Guide for more information.
The bootPassword=key attribute can optionally be combined with the encryptionProvider=providerName, encryptionAlgorithm=algorithm, and/or encryptionKeyLength=length attributes.
-- create a new, encrypted database jdbc:derby:newDB;create=true;dataEncryption=true; bootPassword=cseveryPlace -- configure an existing unencrypted database for encryption jdbc:derby:salesdb;dataEncryption=true;bootPassword=cseveryPlace -- boot an existing encrypted database jdbc:derby:encryptedDB;bootPassword=cseveryPlace -- configure an existing encrypted database for encryption, -- specifying the encryption algorithm jdbc:derby:encryptedDB;dataEncryption=true;bootPassword=cseveryPlace; encryptionAlgorithm=DESede/CBC/NoPadding