> You can write an UDF that makes the encryption/decryption of the data.

The only question is: where to keep encryption key?
Session context variables seem to be a good place.

SY, SD.