Adaptive Server generates encryption keys and stores them in the database in encrypted form. Key owners grant table owners permission to encrypt columns with a named key.