Always Encrypted with secure enclaves expands confidential computing capabilities of Always Encrypted by enabling in-place encryption and rich confidential queries, including pattern matching, range comparisons, and sorting. It leverages the Intel SGX technology available in the new DC-series hardware configuration. Intel SGX enables computations on sensitive plaintext data inside a server-side hardware-based secure enclave that protects data confidentiality from rogue admins and malware.
Learn more about this announcement by reading the Tech Community blog.