[opt](encryption) update encryption function docs
diff --git a/docs/query-data/encryption-function.md b/docs/query-data/encryption-function.md
index 6612cdd..c9f7afa 100644
--- a/docs/query-data/encryption-function.md
+++ b/docs/query-data/encryption-function.md
@@ -26,179 +26,14 @@
Doris provides the following built-in encryption and masking functions. For detailed usage, please refer to the SQL manual.
-## AES_ENCRYPT
-
-An AES encryption function.
-
-This function behaves the same as the` AES_ENCRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Encryption is performed using the OpenSSL library as the underlying mechanism. Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-An AES decryption function. This function behaves the same as the `AES_DECRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Decryption is performed using the OpenSSL library as the underlying mechanism.
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-Calculates the MD5 128-bit hash.
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-Calculates the MD5 128-bit hash for multiple strings.
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 encryption function.
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-Calculates the SHA1 hash using the SHA1 algorithm.
-
-## SHA2
-
-Calculates the SHA2 hash using SHA2 algorithm.
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-
-The `digital_number` is of type `BIGINT`.
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
+- [AES_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../sql-manual/sql-functions/digital-masking)
diff --git a/docs/sql-manual/sql-functions/digital-masking.md b/docs/sql-manual/sql-functions/digital-masking.md
index 9ff7c30..a5178cd 100644
--- a/docs/sql-manual/sql-functions/digital-masking.md
+++ b/docs/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,28 @@
under the License.
-->
-## DIGITAL_MASKING
-
### description
-#### Syntax
+An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-```
+### Syntax
+
+```sql
digital_masking(digital_number)
```
-Alias function, the original function is `concat(left(id,3),'****',right(id,4))`.
-
-Desensitizes the input `digital_number` and returns the result after masking desensitization. `digital_number` is `BIGINT` data type.
-
### example
-1. Desensitize the cell phone number
+Desensitize the cell phone number
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+```sql
+select digital_masking(13812345678);
+```
-### keywords
-
-DIGITAL_MASKING
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index fcde9f5..d0dbea8 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -24,13 +24,16 @@
### Description
-AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying decryption is done using the OpenSSL library.
+AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the decrypted result, where:
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
@@ -39,36 +42,39 @@
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+------------------------------------------------------------------------------------------+
| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
+------------------------------------------------------------------------------------------+
| text |
+------------------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
```
-
-### Keywords
- AES_DECRYPT, AES, DECRYPT
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index 755105e..ddac9dd 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -25,22 +25,25 @@
### Description
-AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying encryption is done using the OpenSSL library.
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the encrypted result, where:
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
- `encryption_mode` is the encryption algorithm, optionally available in variable.
-#### Remarks
+### Notice
For the incoming key, the AES_ENCRYPT function not directly uses, but will further process it. The specific steps are as follows:
+
1. According to the encryption algorithm used, determine the number of bytes of the key, for example, if you use the AES_128_ECB algorithm, the number of bytes of the key is `128 / 8 = 16` (if you use the AES_256_ECB algorithm, the number of bytes of the key is `128 / 8 = 32`). 2;
2. then for the key entered by the user, bits `i` and `16*k+i` are used to perform an isomorphism, followed by a zero if the key entered by the user is less than 16 bits. 3. finally, the newly generated key is used to generate a new key;
3. finally, the newly generated key is used for encryption.
@@ -48,36 +51,39 @@
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
+----------------------------------------------------------+
| wr2JEDVXzL9+2XtRhgIloA== |
+----------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.11 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
+----------------------------------------------------------+
| 3dym0E7/+1zbrLIaBVNHSw== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
+--------------------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
+--------------------------------------------------------------------+
| tsmK1HzbpnEdR2//WhO+MA== |
+--------------------------------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index 7236375..684289e 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
-
### description
-Calculates an MD5 128-bit checksum for the string
-#### Syntax
-`MD5(str)`
+Calculates an MD5 128-bit checksum for the string
+
+### Syntax
+
+```
+MD5(str)
+```
### example
+```sql
+select md5("abc");
```
-MySQL [(none)]> select md5("abc");
+
+```
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
\ No newline at end of file
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index a801e12..058d320 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
-
### description
-Calculates an MD5 128-bit checksum for the strings
-#### Syntax
-`MD5SUM(str[,str])`
+Calculates an MD5 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+MD5SUM(str[,str])
+```
### example
+```sql
+select md5("abcd");
```
-MySQL > select md5("abcd");
+
+```
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
\ No newline at end of file
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 8e9a457..e20343c 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,32 +22,26 @@
under the License.
-->
-## SHA
-
### description
Use SHA1 to digest the message.
-#### Syntax
+### Syntax
-`SHA(str)` or `SHA1(str)`
-
-#### Arguments
-
-- `str`: content to be encrypted
+``` sql
+{ SHA | SHA1 }(str)
+```
### example
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 0fa5dd5..a10b67f 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,17 +22,17 @@
under the License.
-->
-## SHA2
-
### description
Use SHA2 to digest the message.
-#### Syntax
+### Syntax
-`SHA2(str, digest_length)`
+```sql
+SHA2(str, digest_length)
+```
-#### Arguments
+### Paramters
- `str`: content to be encrypted
- `digest_length`: the length of the digest. Support 224, 256, 384, 512
@@ -40,31 +40,37 @@
### example
```SQL
-mysql> select sha2('abc', 224);
+select sha2('abc', 224);
+```
+
+```
+----------------------------------------------------------+
| sha2('abc', 224) |
+----------------------------------------------------------+
| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
+----------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2('abc', 384);
+```sql
+select sha2('abc', 384);
+```
+
+```
+--------------------------------------------------------------------------------------------------+
| sha2('abc', 384) |
+--------------------------------------------------------------------------------------------------+
| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2(NULL, 512);
+```sql
+select sha2(NULL, 512);
+```
+
+```
+-----------------+
| sha2(NULL, 512) |
+-----------------+
| NULL |
+-----------------+
-1 row in set (0.09 sec)
```
-
-### keywords
-
- SHA2, SHA224, SHA256, SHA384, SHA512
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 6dc63cd..fec317f 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
-
### description
-Calculates an SM3 256-bit checksum for the string
-#### Syntax
-`SM3(str)`
+Calculates an SM3 256-bit checksum for the string
+
+### Syntax
+
+```sql
+SM3(str)
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
\ No newline at end of file
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index b8b940a..bc4b679 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
-
### description
-Calculates an SM3 128-bit checksum for the strings
-#### Syntax
-`SM3SUM(str[,str])`
+Calculates an SM3 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+SM3SUM(str[,str])
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
\ No newline at end of file
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index 8ce06ca..72299cb 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -24,11 +24,17 @@
### Description
-#### Syntax
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_DECRYPT function is used to decrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the decrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
+
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
@@ -37,36 +43,39 @@
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.19 sec)
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('FSYstvOmH2cXy7B/072Mug=='), '***', '', 'SM4_128_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.11 sec)
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index 3e0388b..eecad29 100644
--- a/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/docs/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -24,11 +24,17 @@
### Description
-#### Syntax
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_ENCRYPT function is used to encrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the encrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
@@ -37,36 +43,37 @@
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
+----------------------------------------------------------+
| aDjwRflBrDjhBZIOFNw3Tg== |
+----------------------------------------------------------+
-1 row in set (0.15 sec)
+```
-mysql> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_CBC')) |
+----------------------------------------------------------+
| FSYstvOmH2cXy7B/072Mug== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/query-data/encryption-function.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/query-data/encryption-function.md
index 4e6d189..75b375e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/query-data/encryption-function.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/query-data/encryption-function.md
@@ -1,7 +1,7 @@
---
{
- "title": "加密和脱敏",
- "language": "zh-CN"
+ "title": "Encrption and Masking Function ",
+ "language": "en"
}
---
@@ -24,192 +24,16 @@
under the License.
-->
+Doris 内置了如下加密和脱敏函数。详细使用，请参考 SQL 手册。
-Doris 内置了如下加密和脱敏函数。详细使用，请参考 [SQL 手册](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)。
-
-## AES_ENCRYPT
-
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，Padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。详情可参考 [MySQL 官方文档](https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt)
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，Padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-计算 MD5 128-bit
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-计算多个字符串 MD5 128-bit
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 加密函数
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-计算 SM3 256-bit
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-计算多个字符串 SM3 256-bit
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-使用 SHA1 算法对信息进行摘要处理。
-
-```sql
-mysql> select sha("123");
-+------------------------------------------+
-| sha1('123') |
-+------------------------------------------+
-| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
-+------------------------------------------+
-1 row in set (0.13 sec)
-```
-
-## SHA2
-
-使用 SHA2 对信息进行摘要处理。
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
-
-将手机号码进行脱敏处理
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
\ No newline at end of file
+- [AES_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../sql-manual/sql-functions/digital-masking)
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/digital-masking.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/digital-masking.md
index b804ae9..6fcdf66 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/digital-masking.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,30 @@
under the License.
-->
-## DIGITAL_MASKING
-
-### description
-
-#### Syntax
-
-```
-digital_masking(digital_number)
-```
+### 描述
别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
+将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。
-### example
+### 语法
-1. 将手机号码进行脱敏处理
+```sql
+digital_masking(digital_number)
+```
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+### 示例
-### keywords
+将手机号码进行脱敏处理
-DIGITAL_MASKING
+```sql
+select digital_masking(13812345678);
+```
+
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index ffb0f3c..1d21d0a 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -22,53 +22,59 @@
under the License.
-->
-### Description
+### 描述
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行解密。
+AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+#### 语法
-`VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回解密后的结果，其中：
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+------------------------------------------------------------------------------------------+
| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
+------------------------------------------------------------------------------------------+
| text |
+------------------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
-```
-
-### Keywords
- AES_DECRYPT, AES, DECRYPT
+```
\ No newline at end of file
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index 12859a9..deea271 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -23,61 +23,66 @@
-->
-### Description
+### 描述
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行加密。
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+### 语法
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回加密后的结果，其中：
+### 参数
+
- `str` 为待加密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-#### Remarks
+### 注意事项
AES_ENCRYPT 函数对于传入的密钥，并不是直接使用，而是会进一步做处理，具体步骤如下：
1. 根据使用的加密算法，确定密钥的字节数，比如使用 AES_128_ECB 算法，则密钥字节数为 `128 / 8 = 16`（如果使用 AES_256_ECB 算法，则密钥字节数为 `128 / 8 = 32`）；
2. 然后针对用户输入的密钥，第 `i` 位和第 `16*k+i` 位进行异或，如果用户输入的密钥不足 16 位，则后面补 0；
3. 最后，再使用新生成的密钥进行加密；
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
+----------------------------------------------------------+
| wr2JEDVXzL9+2XtRhgIloA== |
+----------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.11 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
+----------------------------------------------------------+
| 3dym0E7/+1zbrLIaBVNHSw== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
+--------------------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
+--------------------------------------------------------------------+
| tsmK1HzbpnEdR2//WhO+MA== |
+--------------------------------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index d3ca86b..b556eb5 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
+### 描述
-### description
-计算 MD5 128-bit
-#### Syntax
+计算 MD5 128-bit
-`MD5(str)`
+### 语法
-### example
+```sql
+MD5(str)
+```
+
+### 示例
+
+```sql
+select md5("abc");
+```
```
-MySQL [(none)]> select md5("abc");
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index 683fbcc..cc956c9 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
+### 描述
-### description
计算 多个字符串 MD5 128-bit
-#### Syntax
-`MD5SUM(str[,str])`
+### 语法
-### example
+```sql
+MD5SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select md5("abcd");
+```
```
-MySQL > select md5("abcd");
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 1d0f4d5..5f4e18e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,33 +22,26 @@
under the License.
-->
-## SHA
-
-### description
+### 描述
使用SHA1算法对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA(str)` 或 `SHA1(str)`
+``` sql
+{ SHA | SHA1 }(str)
+```
-#### Arguments
-
-- `str`: 待加密的内容
-
-### example
+### 示例
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
-
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 277fb6d..0a88c8c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,49 +22,55 @@
under the License.
-->
-## SHA2
-
-### description
+### 描述
使用SHA2对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA2(str, digest_length)`
+```sql
+SHA2(str, digest_length)
+```
-#### Arguments
+### 参数
- `str`: 待加密的内容
- `digest_length`: 摘要长度，支持 224, 256, 384, 512
-### example
+### 示例
```SQL
-mysql> select sha2('abc', 224);
+select sha2('abc', 224);
+```
+
+```
+----------------------------------------------------------+
| sha2('abc', 224) |
+----------------------------------------------------------+
| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
+----------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2('abc', 384);
+```sql
+select sha2('abc', 384);
+```
+
+```
+--------------------------------------------------------------------------------------------------+
| sha2('abc', 384) |
+--------------------------------------------------------------------------------------------------+
| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2(NULL, 512);
+```sql
+select sha2(NULL, 512);
+```
+
+```
+-----------------+
| sha2(NULL, 512) |
+-----------------+
| NULL |
+-----------------+
-1 row in set (0.09 sec)
```
-
-### keywords
-
- SHA2, SHA224, SHA256, SHAA384, SHA512
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 20924ac..024f790 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
+### 描述
-### description
计算 SM3 256-bit
-#### Syntax
-`SM3(str)`
+#### 语法
-### example
+```sql
+SM3(str)
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index a02f8fd..692b313 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
+### 描述
-### description
计算 多个字符串 SM3 256-bit
-#### Syntax
-`SM3SUM(str[,str])`
+### 语法
-### example
+```sql
+SM3SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index fc4994c..f14036c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -23,50 +23,60 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_DECRYPT函数用于对数据进行SM4解密。默认采用 `SM4_128_ECB` 算法。
-返回解密后的结果，其中：
+### 语法
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.19 sec)
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('FSYstvOmH2cXy7B/072Mug=='), '***', '', 'SM4_128_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.11 sec)
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index 3e6b3b2..6be24df 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -23,50 +23,57 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_ENCRYPT函数用于对数据进行SM4加密。默认采用 `SM4_128_ECB` 算法。
-返回加密后的结果，其中：
+#### 语法
+
+```sqk
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### 参数
+
- `str` 为待加密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法最终使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
+----------------------------------------------------------+
| aDjwRflBrDjhBZIOFNw3Tg== |
+----------------------------------------------------------+
-1 row in set (0.15 sec)
+```
-mysql> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_CBC')) |
+----------------------------------------------------------+
| FSYstvOmH2cXy7B/072Mug== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/query/query-data/encryption-function.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/query/query-data/encryption-function.md
index 77b6060..4e094ba 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/query/query-data/encryption-function.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/query/query-data/encryption-function.md
@@ -1,7 +1,7 @@
---
{
- "title": "加密和脱敏",
- "language": "zh-CN"
+ "title": "Encrption and Masking Function ",
+ "language": "en"
}
---
@@ -24,192 +24,16 @@
under the License.
-->
-
Doris 内置了如下加密和脱敏函数。详细使用，请参考 SQL 手册。
-## AES_ENCRYPT
-
-Aes 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-Aes 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-计算 MD5 128-bit
-
-```Plain
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-计算多个字符串 MD5 128-bit
-
-```Plain
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 加密函数
-
-```Plain
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-计算 SM3 256-bit
-
-```Plain
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-计算多个字符串 SM3 256-bit
-
-```Plain
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-使用 SHA1 算法对信息进行摘要处理。
-
-```sql
-mysql> select sha("123");
-+------------------------------------------+
-| sha1('123') |
-+------------------------------------------+
-| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
-+------------------------------------------+
-1 row in set (0.13 sec)
-```
-
-## SHA2
-
-使用 SHA2 对信息进行摘要处理。
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
-
-将手机号码进行脱敏处理
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
\ No newline at end of file
+- [AES_ENCRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../../sql-manual/sql-functions/digital-masking)
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/digital-masking.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/digital-masking.md
index b804ae9..6fcdf66 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/digital-masking.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,30 @@
under the License.
-->
-## DIGITAL_MASKING
-
-### description
-
-#### Syntax
-
-```
-digital_masking(digital_number)
-```
+### 描述
别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
+将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。
-### example
+### 语法
-1. 将手机号码进行脱敏处理
+```sql
+digital_masking(digital_number)
+```
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+### 示例
-### keywords
+将手机号码进行脱敏处理
-DIGITAL_MASKING
+```sql
+select digital_masking(13812345678);
+```
+
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index a3bcd1c..1d21d0a 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -22,49 +22,59 @@
under the License.
-->
-### Description
+### 描述
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行解密。
+AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+#### 语法
-`VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回解密后的结果，其中：
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
-- `encryption_mode` 为加密算法，可选值见于：[变量](../../../query/query-variables/variables)。
+- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `AES_128_ECB` 算法进行解密。因此不推荐调用。
-:::
-
-### Example
+### 示例
```sql
+set block_encryption_mode='';
select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
```
-如果你想更换其他加密算法，可以
+```
++--------------------------------------------------------------------------------+
+| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
++--------------------------------------------------------------------------------+
+| text |
++--------------------------------------------------------------------------------+
+```
```sql
set block_encryption_mode="AES_256_CBC";
-
-select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
-+---------------------------------------------------------------------------+
-| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789') |
-+---------------------------------------------------------------------------+
-| text |
-+---------------------------------------------------------------------------+
-1 row in set (0.01 sec)
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
```
-### Keywords
- AES_DECRYPT, AES, DECRYPT
+```
++--------------------------------------------------------------------------------+
+| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
++--------------------------------------------------------------------------------+
+| text |
++--------------------------------------------------------------------------------+
+```
+
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
++------------------------------------------------------------------------------------------+
+| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
++------------------------------------------------------------------------------------------+
+| text |
++------------------------------------------------------------------------------------------+
+```
\ No newline at end of file
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index 373894f..deea271 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -23,57 +23,66 @@
-->
-### Description
+### 描述
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行加密。
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+### 语法
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回加密后的结果，其中：
+### 参数
+
- `str` 为待加密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
-- `encryption_mode` 为加密算法，可选值见于：[变量](../../../query/query-variables/variables)。
+- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `AES_128_ECB` 算法进行加密。因此不推荐调用。
-:::
-
-#### Remarks
+### 注意事项
AES_ENCRYPT 函数对于传入的密钥，并不是直接使用，而是会进一步做处理，具体步骤如下：
1. 根据使用的加密算法，确定密钥的字节数，比如使用 AES_128_ECB 算法，则密钥字节数为 `128 / 8 = 16`（如果使用 AES_256_ECB 算法，则密钥字节数为 `128 / 8 = 32`）；
2. 然后针对用户输入的密钥，第 `i` 位和第 `16*k+i` 位进行异或，如果用户输入的密钥不足 16 位，则后面补 0；
3. 最后，再使用新生成的密钥进行加密；
-### Example
+### 示例
```sql
+set block_encryption_mode='';
select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
```
-如果你想更换其他加密算法，可以
+```
++----------------------------------------------------------+
+| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
++----------------------------------------------------------+
+| wr2JEDVXzL9+2XtRhgIloA== |
++----------------------------------------------------------+
+```
```sql
set block_encryption_mode="AES_256_CBC";
-
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+-----------------------------------------------------+
-| to_base64(aes_encrypt('text', '***', '0123456789')) |
-+-----------------------------------------------------+
-| tsmK1HzbpnEdR2//WhO+MA== |
-+-----------------------------------------------------+
-1 row in set (0.01 sec)
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
```
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
+```
++----------------------------------------------------------+
+| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
++----------------------------------------------------------+
+| 3dym0E7/+1zbrLIaBVNHSw== |
++----------------------------------------------------------+
+```
+
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
++--------------------------------------------------------------------+
+| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
++--------------------------------------------------------------------+
+| tsmK1HzbpnEdR2//WhO+MA== |
++--------------------------------------------------------------------+
+```
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index d3ca86b..b556eb5 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
+### 描述
-### description
-计算 MD5 128-bit
-#### Syntax
+计算 MD5 128-bit
-`MD5(str)`
+### 语法
-### example
+```sql
+MD5(str)
+```
+
+### 示例
+
+```sql
+select md5("abc");
+```
```
-MySQL [(none)]> select md5("abc");
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index 683fbcc..cc956c9 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
+### 描述
-### description
计算 多个字符串 MD5 128-bit
-#### Syntax
-`MD5SUM(str[,str])`
+### 语法
-### example
+```sql
+MD5SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select md5("abcd");
+```
```
-MySQL > select md5("abcd");
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 1d0f4d5..5f4e18e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,33 +22,26 @@
under the License.
-->
-## SHA
-
-### description
+### 描述
使用SHA1算法对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA(str)` 或 `SHA1(str)`
+``` sql
+{ SHA | SHA1 }(str)
+```
-#### Arguments
-
-- `str`: 待加密的内容
-
-### example
+### 示例
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
-
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index f4a55f3..0a88c8c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,49 +22,55 @@
under the License.
-->
-## SHA2
-
-### description
+### 描述
使用SHA2对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA2(str, digest_length)`
+```sql
+SHA2(str, digest_length)
+```
-#### Arguments
+### 参数
- `str`: 待加密的内容
-- `digest_length`: 摘要长度
+- `digest_length`: 摘要长度，支持 224, 256, 384, 512
-### example
+### 示例
```SQL
-mysql> select sha2('abc', 224);
+select sha2('abc', 224);
+```
+
+```
+----------------------------------------------------------+
| sha2('abc', 224) |
+----------------------------------------------------------+
| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
+----------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2('abc', 384);
+```sql
+select sha2('abc', 384);
+```
+
+```
+--------------------------------------------------------------------------------------------------+
| sha2('abc', 384) |
+--------------------------------------------------------------------------------------------------+
| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2(NULL, 512);
+```sql
+select sha2(NULL, 512);
+```
+
+```
+-----------------+
| sha2(NULL, 512) |
+-----------------+
| NULL |
+-----------------+
-1 row in set (0.09 sec)
```
-
-### keywords
-
- SHA2
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 20924ac..024f790 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
+### 描述
-### description
计算 SM3 256-bit
-#### Syntax
-`SM3(str)`
+#### 语法
-### example
+```sql
+SM3(str)
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index a02f8fd..692b313 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
+### 描述
-### description
计算 多个字符串 SM3 256-bit
-#### Syntax
-`SM3SUM(str[,str])`
+### 语法
-### example
+```sql
+SM3SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index cf5d9cc..f84c42e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -23,43 +23,47 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_DECRYPT函数用于对数据进行SM4解密。默认采用 `SM4_128_ECB` 算法。
-返回解密后的结果，其中：
+### 语法
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
-- `encryption_mode` 为加密算法，可选值见于：[变量](../../../query/query-variables/variables)。
+- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `SM4_128_ECB` 算法进行解密。这与 1.2 版本行为不同，升降级时必须注意。
-:::
-
-### Example
+### 示例
```sql
-MySQL [(none)]> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.009 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```
++--------------------------------------------------------------------------------+
+| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
++--------------------------------------------------------------------------------+
+| text |
++--------------------------------------------------------------------------------+
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index 616e36e..baee07e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -23,43 +23,44 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_ENCRYPT函数用于对数据进行SM4加密。默认采用 `SM4_128_ECB` 算法。
-返回加密后的结果，其中：
+#### 语法
+
+```sqk
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### 参数
+
- `str` 为待加密文本；
-- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
+- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法最终使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
-- `encryption_mode` 为加密算法，可选值见于：[变量](../../../query/query-variables/variables)。
+- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `SM4_128_ECB` 算法进行加密。这与 1.2 版本行为不同，升降级时必须注意。
-:::
-
-### Example
+### 示例
```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
+```
++----------------------------------------------------------+
+| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
++----------------------------------------------------------+
+| aDjwRflBrDjhBZIOFNw3Tg== |
++----------------------------------------------------------+
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/query-data/encryption-function.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/query-data/encryption-function.md
index 4e6d189..75b375e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/query-data/encryption-function.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/query-data/encryption-function.md
@@ -1,7 +1,7 @@
---
{
- "title": "加密和脱敏",
- "language": "zh-CN"
+ "title": "Encrption and Masking Function ",
+ "language": "en"
}
---
@@ -24,192 +24,16 @@
under the License.
-->
+Doris 内置了如下加密和脱敏函数。详细使用，请参考 SQL 手册。
-Doris 内置了如下加密和脱敏函数。详细使用，请参考 [SQL 手册](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)。
-
-## AES_ENCRYPT
-
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，Padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。详情可参考 [MySQL 官方文档](https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt)
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，Padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-计算 MD5 128-bit
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-计算多个字符串 MD5 128-bit
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 加密函数
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-计算 SM3 256-bit
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-计算多个字符串 SM3 256-bit
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-使用 SHA1 算法对信息进行摘要处理。
-
-```sql
-mysql> select sha("123");
-+------------------------------------------+
-| sha1('123') |
-+------------------------------------------+
-| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
-+------------------------------------------+
-1 row in set (0.13 sec)
-```
-
-## SHA2
-
-使用 SHA2 对信息进行摘要处理。
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
-
-将手机号码进行脱敏处理
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
\ No newline at end of file
+- [AES_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../sql-manual/sql-functions/digital-masking)
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/digital-masking.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/digital-masking.md
index b804ae9..6fcdf66 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/digital-masking.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,30 @@
under the License.
-->
-## DIGITAL_MASKING
-
-### description
-
-#### Syntax
-
-```
-digital_masking(digital_number)
-```
+### 描述
别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
+将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。
-### example
+### 语法
-1. 将手机号码进行脱敏处理
+```sql
+digital_masking(digital_number)
+```
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+### 示例
-### keywords
+将手机号码进行脱敏处理
-DIGITAL_MASKING
+```sql
+select digital_masking(13812345678);
+```
+
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index 73a8388..1d21d0a 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -22,59 +22,59 @@
under the License.
-->
-### Description
+### 描述
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行解密。
+AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+#### 语法
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回解密后的结果，其中：
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 2.1.6，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `AES_128_ECB` 算法进行解密。因此不推荐调用。
-
-2.1.7 起，该行为恢复正常。
-:::
-
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 2.1.7
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+------------------------------------------------------------------------------------------+
| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
+------------------------------------------------------------------------------------------+
| text |
+------------------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
-```
-
-### Keywords
- AES_DECRYPT, AES, DECRYPT
+```
\ No newline at end of file
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index f886c68..deea271 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -23,67 +23,66 @@
-->
-### Description
+### 描述
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行加密。
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+### 语法
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回加密后的结果，其中：
+### 参数
+
- `str` 为待加密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 2.1.6，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `AES_128_ECB` 算法进行加密。因此不推荐调用。
-
-2.1.7 起，该行为恢复正常。
-:::
-
-#### Remarks
+### 注意事项
AES_ENCRYPT 函数对于传入的密钥，并不是直接使用，而是会进一步做处理，具体步骤如下：
1. 根据使用的加密算法，确定密钥的字节数，比如使用 AES_128_ECB 算法，则密钥字节数为 `128 / 8 = 16`（如果使用 AES_256_ECB 算法，则密钥字节数为 `128 / 8 = 32`）；
2. 然后针对用户输入的密钥，第 `i` 位和第 `16*k+i` 位进行异或，如果用户输入的密钥不足 16 位，则后面补 0；
3. 最后，再使用新生成的密钥进行加密；
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
+----------------------------------------------------------+
| wr2JEDVXzL9+2XtRhgIloA== |
+----------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.11 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3')); -- since 2.1.7
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
+----------------------------------------------------------+
| 3dym0E7/+1zbrLIaBVNHSw== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
+--------------------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
+--------------------------------------------------------------------+
| tsmK1HzbpnEdR2//WhO+MA== |
+--------------------------------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index d3ca86b..b556eb5 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
+### 描述
-### description
-计算 MD5 128-bit
-#### Syntax
+计算 MD5 128-bit
-`MD5(str)`
+### 语法
-### example
+```sql
+MD5(str)
+```
+
+### 示例
+
+```sql
+select md5("abc");
+```
```
-MySQL [(none)]> select md5("abc");
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index 683fbcc..cc956c9 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
+### 描述
-### description
计算 多个字符串 MD5 128-bit
-#### Syntax
-`MD5SUM(str[,str])`
+### 语法
-### example
+```sql
+MD5SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select md5("abcd");
+```
```
-MySQL > select md5("abcd");
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 1d0f4d5..5f4e18e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,33 +22,26 @@
under the License.
-->
-## SHA
-
-### description
+### 描述
使用SHA1算法对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA(str)` 或 `SHA1(str)`
+``` sql
+{ SHA | SHA1 }(str)
+```
-#### Arguments
-
-- `str`: 待加密的内容
-
-### example
+### 示例
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
-
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 277fb6d..0a88c8c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,49 +22,55 @@
under the License.
-->
-## SHA2
-
-### description
+### 描述
使用SHA2对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA2(str, digest_length)`
+```sql
+SHA2(str, digest_length)
+```
-#### Arguments
+### 参数
- `str`: 待加密的内容
- `digest_length`: 摘要长度，支持 224, 256, 384, 512
-### example
+### 示例
```SQL
-mysql> select sha2('abc', 224);
+select sha2('abc', 224);
+```
+
+```
+----------------------------------------------------------+
| sha2('abc', 224) |
+----------------------------------------------------------+
| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
+----------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2('abc', 384);
+```sql
+select sha2('abc', 384);
+```
+
+```
+--------------------------------------------------------------------------------------------------+
| sha2('abc', 384) |
+--------------------------------------------------------------------------------------------------+
| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2(NULL, 512);
+```sql
+select sha2(NULL, 512);
+```
+
+```
+-----------------+
| sha2(NULL, 512) |
+-----------------+
| NULL |
+-----------------+
-1 row in set (0.09 sec)
```
-
-### keywords
-
- SHA2, SHA224, SHA256, SHAA384, SHA512
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 20924ac..024f790 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
+### 描述
-### description
计算 SM3 256-bit
-#### Syntax
-`SM3(str)`
+#### 语法
-### example
+```sql
+SM3(str)
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index a02f8fd..692b313 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
+### 描述
-### description
计算 多个字符串 SM3 256-bit
-#### Syntax
-`SM3SUM(str[,str])`
+### 语法
-### example
+```sql
+SM3SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index 99eee48..f14036c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -23,56 +23,60 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_DECRYPT函数用于对数据进行SM4解密。默认采用 `SM4_128_ECB` 算法。
-返回解密后的结果，其中：
+### 语法
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 2.1.6，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `SM4_128_ECB` 算法进行解密。因此不推荐调用。
-
-2.1.7 起，该行为恢复正常。
-:::
-
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.19 sec)
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 2.1.7
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('FSYstvOmH2cXy7B/072Mug=='), '***', '', 'SM4_128_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.11 sec)
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index 1f67fb5..9aa8d98 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -23,56 +23,57 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_ENCRYPT函数用于对数据进行SM4加密。默认采用 `SM4_128_ECB` 算法。
-返回加密后的结果，其中：
+#### 语法
+
+```sqk
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### 参数
+
- `str` 为待加密文本；
-- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
+- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法最终使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 2.1.6，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `SM4_128_ECB` 算法进行加密。因此不推荐调用。
-
-2.1.7 起，该行为恢复正常。
-:::
-
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
+----------------------------------------------------------+
| aDjwRflBrDjhBZIOFNw3Tg== |
+----------------------------------------------------------+
-1 row in set (0.15 sec)
+```
-mysql> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_CBC')) |
+----------------------------------------------------------+
| FSYstvOmH2cXy7B/072Mug== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/query-data/encryption-function.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/query-data/encryption-function.md
index 4e6d189..75b375e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/query-data/encryption-function.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/query-data/encryption-function.md
@@ -1,7 +1,7 @@
---
{
- "title": "加密和脱敏",
- "language": "zh-CN"
+ "title": "Encrption and Masking Function ",
+ "language": "en"
}
---
@@ -24,192 +24,16 @@
under the License.
-->
+Doris 内置了如下加密和脱敏函数。详细使用，请参考 SQL 手册。
-Doris 内置了如下加密和脱敏函数。详细使用，请参考 [SQL 手册](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)。
-
-## AES_ENCRYPT
-
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，Padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。详情可参考 [MySQL 官方文档](https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt)
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 AES_128_ECB 算法，Padding 模式为 PKCS7。底层使用 OpenSSL 库进行加密。
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-计算 MD5 128-bit
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-计算多个字符串 MD5 128-bit
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 加密函数
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-计算 SM3 256-bit
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-计算多个字符串 SM3 256-bit
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-使用 SHA1 算法对信息进行摘要处理。
-
-```sql
-mysql> select sha("123");
-+------------------------------------------+
-| sha1('123') |
-+------------------------------------------+
-| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
-+------------------------------------------+
-1 row in set (0.13 sec)
-```
-
-## SHA2
-
-使用 SHA2 对信息进行摘要处理。
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
-
-将手机号码进行脱敏处理
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
\ No newline at end of file
+- [AES_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../sql-manual/sql-functions/digital-masking)
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/digital-masking.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/digital-masking.md
index b804ae9..6fcdf66 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/digital-masking.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,30 @@
under the License.
-->
-## DIGITAL_MASKING
-
-### description
-
-#### Syntax
-
-```
-digital_masking(digital_number)
-```
+### 描述
别名函数，原始函数为 `concat(left(id,3),'****',right(id,4))`。
-将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。`digital_number` 为 `BIGINT` 数据类型。
+将输入的 `digital_number` 进行脱敏处理，返回遮盖脱敏后的结果。
-### example
+### 语法
-1. 将手机号码进行脱敏处理
+```sql
+digital_masking(digital_number)
+```
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+### 示例
-### keywords
+将手机号码进行脱敏处理
-DIGITAL_MASKING
+```sql
+select digital_masking(13812345678);
+```
+
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index 13d86e8..1d21d0a 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -22,59 +22,59 @@
under the License.
-->
-### Description
+### 描述
-AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行解密。
+AES 解密函数。该函数与 MySQL 中的 `AES_DECRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+#### 语法
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回解密后的结果，其中：
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 3.0.2，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `AES_128_ECB` 算法进行解密。因此不推荐调用。
-
-3.0.3 起，该行为恢复正常。
-:::
-
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 3.0.3
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+------------------------------------------------------------------------------------------+
| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
+------------------------------------------------------------------------------------------+
| text |
+------------------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
-```
-
-### Keywords
- AES_DECRYPT, AES, DECRYPT
+```
\ No newline at end of file
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index 4c3d157..deea271 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -23,67 +23,66 @@
-->
-### Description
+### 描述
-AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。底层使用 OpenSSL 库进行加密。
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES 加密函数。该函数与 MySQL 中的 `AES_ENCRYPT` 函数行为一致。默认采用 `AES_128_ECB` 算法，padding 模式为 `PKCS7`。
-#### Syntax
+### 语法
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
-返回加密后的结果，其中：
+### 参数
+
- `str` 为待加密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 3.0.2，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `AES_128_ECB` 算法进行加密。因此不推荐调用。
-
-3.0.3 起，该行为恢复正常。
-:::
-
-#### Remarks
+### 注意事项
AES_ENCRYPT 函数对于传入的密钥，并不是直接使用，而是会进一步做处理，具体步骤如下：
1. 根据使用的加密算法，确定密钥的字节数，比如使用 AES_128_ECB 算法，则密钥字节数为 `128 / 8 = 16`（如果使用 AES_256_ECB 算法，则密钥字节数为 `128 / 8 = 32`）；
2. 然后针对用户输入的密钥，第 `i` 位和第 `16*k+i` 位进行异或，如果用户输入的密钥不足 16 位，则后面补 0；
3. 最后，再使用新生成的密钥进行加密；
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
+----------------------------------------------------------+
| wr2JEDVXzL9+2XtRhgIloA== |
+----------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.11 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3')); -- since 3.0.3
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
+----------------------------------------------------------+
| 3dym0E7/+1zbrLIaBVNHSw== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
+--------------------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
+--------------------------------------------------------------------+
| tsmK1HzbpnEdR2//WhO+MA== |
+--------------------------------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index d3ca86b..b556eb5 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
+### 描述
-### description
-计算 MD5 128-bit
-#### Syntax
+计算 MD5 128-bit
-`MD5(str)`
+### 语法
-### example
+```sql
+MD5(str)
+```
+
+### 示例
+
+```sql
+select md5("abc");
+```
```
-MySQL [(none)]> select md5("abc");
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index 683fbcc..cc956c9 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
+### 描述
-### description
计算 多个字符串 MD5 128-bit
-#### Syntax
-`MD5SUM(str[,str])`
+### 语法
-### example
+```sql
+MD5SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select md5("abcd");
+```
```
-MySQL > select md5("abcd");
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 1d0f4d5..5f4e18e 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,33 +22,26 @@
under the License.
-->
-## SHA
-
-### description
+### 描述
使用SHA1算法对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA(str)` 或 `SHA1(str)`
+``` sql
+{ SHA | SHA1 }(str)
+```
-#### Arguments
-
-- `str`: 待加密的内容
-
-### example
+### 示例
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
-
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 277fb6d..0a88c8c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,49 +22,55 @@
under the License.
-->
-## SHA2
-
-### description
+### 描述
使用SHA2对信息进行摘要处理。
-#### Syntax
+### 语法
-`SHA2(str, digest_length)`
+```sql
+SHA2(str, digest_length)
+```
-#### Arguments
+### 参数
- `str`: 待加密的内容
- `digest_length`: 摘要长度，支持 224, 256, 384, 512
-### example
+### 示例
```SQL
-mysql> select sha2('abc', 224);
+select sha2('abc', 224);
+```
+
+```
+----------------------------------------------------------+
| sha2('abc', 224) |
+----------------------------------------------------------+
| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
+----------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2('abc', 384);
+```sql
+select sha2('abc', 384);
+```
+
+```
+--------------------------------------------------------------------------------------------------+
| sha2('abc', 384) |
+--------------------------------------------------------------------------------------------------+
| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2(NULL, 512);
+```sql
+select sha2(NULL, 512);
+```
+
+```
+-----------------+
| sha2(NULL, 512) |
+-----------------+
| NULL |
+-----------------+
-1 row in set (0.09 sec)
```
-
-### keywords
-
- SHA2, SHA224, SHA256, SHAA384, SHA512
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 20924ac..024f790 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
+### 描述
-### description
计算 SM3 256-bit
-#### Syntax
-`SM3(str)`
+#### 语法
-### example
+```sql
+SM3(str)
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index a02f8fd..692b313 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
+### 描述
-### description
计算 多个字符串 SM3 256-bit
-#### Syntax
-`SM3SUM(str[,str])`
+### 语法
-### example
+```sql
+SM3SUM(str[,str])
+```
+
+### 示例
+
+```sql
+select sm3("abcd");
+```
```
-MySQL > select sm3("abcd");
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index d590bb4..f14036c 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -23,56 +23,60 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_DECRYPT函数用于对数据进行SM4解密。默认采用 `SM4_128_ECB` 算法。
-返回解密后的结果，其中：
+### 语法
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+
+### 参数
+
- `str` 为待解密文本；
- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 3.0.2，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `SM4_128_ECB` 算法进行解密。因此不推荐调用。
-
-3.0.3 起，该行为恢复正常。
-:::
-
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.19 sec)
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 3.0.3
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('FSYstvOmH2cXy7B/072Mug=='), '***', '', 'SM4_128_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.11 sec)
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index 10aaecf..6be24df 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -23,56 +23,57 @@
-->
-### Description
-#### Syntax
+### 描述
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4是一种国家标准的对称密钥加密算法，广泛应用于金融、通信、电子商务等领域。SM4_ENCRYPT函数用于对数据进行SM4加密。默认采用 `SM4_128_ECB` 算法。
-返回加密后的结果，其中：
+#### 语法
+
+```sqk
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### 参数
+
- `str` 为待加密文本；
-- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
+- `key_str` 为密钥。注意此密钥并非 16 进制编码，而是编码后的字符串表示。例如对于 128 位密钥加密，`key_str` 长度应为 16。如果密钥长度不足，使用**零填充**补齐。如果长度超出，使用循环异或的方式求出最终密钥。例如算法最终使用的 128 位密钥为 `key`，则 `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` 为算法中使用到的初始向量，仅在特定算法下生效，如不指定，则 Doris 使用内置向量；
- `encryption_mode` 为加密算法，可选值见于变量。
-:::warning
-截止 3.0.2，两参数版本，会无视 session variable `block_encryption_mode`，始终使用 `SM4_128_ECB` 算法进行加密。因此不推荐调用。
-
-3.0.3 起，该行为恢复正常。
-:::
-
-### Example
+### 示例
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
+----------------------------------------------------------+
| aDjwRflBrDjhBZIOFNw3Tg== |
+----------------------------------------------------------+
-1 row in set (0.15 sec)
+```
-mysql> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 3.0.3
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_CBC')) |
+----------------------------------------------------------+
| FSYstvOmH2cXy7B/072Mug== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/versioned_docs/version-2.0/query/query-data/encryption-function.md b/versioned_docs/version-2.0/query/query-data/encryption-function.md
index 6612cdd..af25bc0 100644
--- a/versioned_docs/version-2.0/query/query-data/encryption-function.md
+++ b/versioned_docs/version-2.0/query/query-data/encryption-function.md
@@ -26,179 +26,14 @@
Doris provides the following built-in encryption and masking functions. For detailed usage, please refer to the SQL manual.
-## AES_ENCRYPT
-
-An AES encryption function.
-
-This function behaves the same as the` AES_ENCRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Encryption is performed using the OpenSSL library as the underlying mechanism. Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-An AES decryption function. This function behaves the same as the `AES_DECRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Decryption is performed using the OpenSSL library as the underlying mechanism.
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-Calculates the MD5 128-bit hash.
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-Calculates the MD5 128-bit hash for multiple strings.
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 encryption function.
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-Calculates the SHA1 hash using the SHA1 algorithm.
-
-## SHA2
-
-Calculates the SHA2 hash using SHA2 algorithm.
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-
-The `digital_number` is of type `BIGINT`.
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
+- [AES_ENCRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../../sql-manual/sql-functions/digital-masking)
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/digital-masking.md b/versioned_docs/version-2.0/sql-manual/sql-functions/digital-masking.md
index 9ff7c30..a5178cd 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/digital-masking.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,28 @@
under the License.
-->
-## DIGITAL_MASKING
-
### description
-#### Syntax
+An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-```
+### Syntax
+
+```sql
digital_masking(digital_number)
```
-Alias function, the original function is `concat(left(id,3),'****',right(id,4))`.
-
-Desensitizes the input `digital_number` and returns the result after masking desensitization. `digital_number` is `BIGINT` data type.
-
### example
-1. Desensitize the cell phone number
+Desensitize the cell phone number
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+```sql
+select digital_masking(13812345678);
+```
-### keywords
-
-DIGITAL_MASKING
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index 2ddbc23..d0dbea8 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -24,47 +24,57 @@
### Description
-AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying decryption is done using the OpenSSL library.
+AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the decrypted result, where:
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in [variables](../../../query/query-variables/variables)。
-
-:::warning
-Function with two arguments will ignore session variable `block_encryption_mode` and always use `AES_128_ECB` to do decryption. So it's not recommended to use it.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
+set block_encryption_mode='';
select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
```
-If want to use other encryption algorithms, you can:
+```
++--------------------------------------------------------------------------------+
+| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
++--------------------------------------------------------------------------------+
+| text |
++--------------------------------------------------------------------------------+
+```
```sql
set block_encryption_mode="AES_256_CBC";
-
-select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
-+---------------------------------------------------------------------------+
-| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789') |
-+---------------------------------------------------------------------------+
-| text |
-+---------------------------------------------------------------------------+
-1 row in set (0.01 sec)
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
```
-### Keywords
- AES_DECRYPT, AES, DECRYPT
+```
++--------------------------------------------------------------------------------+
+| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
++--------------------------------------------------------------------------------+
+| text |
++--------------------------------------------------------------------------------+
+```
+
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
++------------------------------------------------------------------------------------------+
+| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
++------------------------------------------------------------------------------------------+
+| text |
++------------------------------------------------------------------------------------------+
+```
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index ff8d2f3..e2414b6 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -25,26 +25,25 @@
### Description
-AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying encryption is done using the OpenSSL library.
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the encrypted result, where:
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in [variable](../../../query/query-variables/variables)。
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
-:::warning
-Function with two arguments will ignore session variable `block_encryption_mode` and always use `AES_128_ECB` to do encryption. So it's not recommended to use it.
-:::
-
-#### Remarks
+### Notice
For the incoming key, the AES_ENCRYPT function not directly uses, but will further process it. The specific steps are as follows:
+
1. According to the encryption algorithm used, determine the number of bytes of the key, for example, if you use the AES_128_ECB algorithm, the number of bytes of the key is `128 / 8 = 16` (if you use the AES_256_ECB algorithm, the number of bytes of the key is `128 / 8 = 32`). 2;
2. then for the key entered by the user, bits `i` and `16*k+i` are used to perform an isomorphism, followed by a zero if the key entered by the user is less than 16 bits. 3. finally, the newly generated key is used to generate a new key;
3. finally, the newly generated key is used for encryption.
@@ -52,28 +51,39 @@
### Example
```sql
+set block_encryption_mode='';
select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
```
-If want to use other encryption algorithms, you can:
+```
++----------------------------------------------------------+
+| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
++----------------------------------------------------------+
+| wr2JEDVXzL9+2XtRhgIloA== |
++----------------------------------------------------------+
+```
```sql
set block_encryption_mode="AES_256_CBC";
-
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+-----------------------------------------------------+
-| to_base64(aes_encrypt('text', '***', '0123456789')) |
-+-----------------------------------------------------+
-| tsmK1HzbpnEdR2//WhO+MA== |
-+-----------------------------------------------------+
-1 row in set (0.01 sec)
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
```
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
+```
++----------------------------------------------------------+
+| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
++----------------------------------------------------------+
+| 3dym0E7/+1zbrLIaBVNHSw== |
++----------------------------------------------------------+
+```
+
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
++--------------------------------------------------------------------+
+| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
++--------------------------------------------------------------------+
+| tsmK1HzbpnEdR2//WhO+MA== |
++--------------------------------------------------------------------+
+```
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index 7236375..684289e 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
-
### description
-Calculates an MD5 128-bit checksum for the string
-#### Syntax
-`MD5(str)`
+Calculates an MD5 128-bit checksum for the string
+
+### Syntax
+
+```
+MD5(str)
+```
### example
+```sql
+select md5("abc");
```
-MySQL [(none)]> select md5("abc");
+
+```
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
\ No newline at end of file
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index a801e12..058d320 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
-
### description
-Calculates an MD5 128-bit checksum for the strings
-#### Syntax
-`MD5SUM(str[,str])`
+Calculates an MD5 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+MD5SUM(str[,str])
+```
### example
+```sql
+select md5("abcd");
```
-MySQL > select md5("abcd");
+
+```
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
\ No newline at end of file
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 8e9a457..e20343c 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,32 +22,26 @@
under the License.
-->
-## SHA
-
### description
Use SHA1 to digest the message.
-#### Syntax
+### Syntax
-`SHA(str)` or `SHA1(str)`
-
-#### Arguments
-
-- `str`: content to be encrypted
+``` sql
+{ SHA | SHA1 }(str)
+```
### example
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 2f7f838..a10b67f 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,49 +22,55 @@
under the License.
-->
-## SHA2
-
### description
Use SHA2 to digest the message.
-#### Syntax
+### Syntax
-`SHA2(str, digest_length)`
+```sql
+SHA2(str, digest_length)
+```
-#### Arguments
+### Paramters
- `str`: content to be encrypted
-- `digest_length`: the length of the digest
+- `digest_length`: the length of the digest. Support 224, 256, 384, 512
### example
```SQL
-mysql> select sha2('abc', 224);
+select sha2('abc', 224);
+```
+
+```
+----------------------------------------------------------+
| sha2('abc', 224) |
+----------------------------------------------------------+
| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
+----------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2('abc', 384);
+```sql
+select sha2('abc', 384);
+```
+
+```
+--------------------------------------------------------------------------------------------------+
| sha2('abc', 384) |
+--------------------------------------------------------------------------------------------------+
| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
+```
-mysql> select sha2(NULL, 512);
+```sql
+select sha2(NULL, 512);
+```
+
+```
+-----------------+
| sha2(NULL, 512) |
+-----------------+
| NULL |
+-----------------+
-1 row in set (0.09 sec)
```
-
-### keywords
-
- SHA2
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 6dc63cd..fec317f 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
-
### description
-Calculates an SM3 256-bit checksum for the string
-#### Syntax
-`SM3(str)`
+Calculates an SM3 256-bit checksum for the string
+
+### Syntax
+
+```sql
+SM3(str)
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
\ No newline at end of file
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index b8b940a..bc4b679 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
-
### description
-Calculates an SM3 128-bit checksum for the strings
-#### Syntax
-`SM3SUM(str[,str])`
+Calculates an SM3 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+SM3SUM(str[,str])
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
\ No newline at end of file
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index 0a1768d..6f13ee3 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -24,42 +24,45 @@
### Description
-#### Syntax
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_DECRYPT function is used to decrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the decrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
+
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in [variables](../../../query/query-variables/variables)。
-
-:::warning
-Function with two arguments will ignore session variable `block_encryption_mode` and always use `SM4_128_ECB` to do decryption. This is different from the 1.2 version behavior and must be taken into account when upgrading or downgrading.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
-MySQL [(none)]> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.009 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```
++--------------------------------------------------------------------------------+
+| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
++--------------------------------------------------------------------------------+
+| text |
++--------------------------------------------------------------------------------+
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index a999456..398d046 100644
--- a/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/versioned_docs/version-2.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -24,42 +24,43 @@
### Description
-#### Syntax
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_ENCRYPT function is used to encrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the encrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in [variable](../../../query/query-variables/variables)。
-
-:::warning
-Function with two arguments will ignore session variable `block_encryption_mode` and always use `SM4_128_ECB` to do encryption. This is different from the 1.2 version behavior and must be taken into account when upgrading or downgrading.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
+```
++----------------------------------------------------------+
+| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
++----------------------------------------------------------+
+| aDjwRflBrDjhBZIOFNw3Tg== |
++----------------------------------------------------------+
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/versioned_docs/version-2.1/query-data/encryption-function.md b/versioned_docs/version-2.1/query-data/encryption-function.md
index 6612cdd..c9f7afa 100644
--- a/versioned_docs/version-2.1/query-data/encryption-function.md
+++ b/versioned_docs/version-2.1/query-data/encryption-function.md
@@ -26,179 +26,14 @@
Doris provides the following built-in encryption and masking functions. For detailed usage, please refer to the SQL manual.
-## AES_ENCRYPT
-
-An AES encryption function.
-
-This function behaves the same as the` AES_ENCRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Encryption is performed using the OpenSSL library as the underlying mechanism. Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-An AES decryption function. This function behaves the same as the `AES_DECRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Decryption is performed using the OpenSSL library as the underlying mechanism.
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-Calculates the MD5 128-bit hash.
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-Calculates the MD5 128-bit hash for multiple strings.
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 encryption function.
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-Calculates the SHA1 hash using the SHA1 algorithm.
-
-## SHA2
-
-Calculates the SHA2 hash using SHA2 algorithm.
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-
-The `digital_number` is of type `BIGINT`.
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
+- [AES_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../sql-manual/sql-functions/digital-masking)
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/digital-masking.md b/versioned_docs/version-2.1/sql-manual/sql-functions/digital-masking.md
index 9ff7c30..a5178cd 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/digital-masking.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,28 @@
under the License.
-->
-## DIGITAL_MASKING
-
### description
-#### Syntax
+An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-```
+### Syntax
+
+```sql
digital_masking(digital_number)
```
-Alias function, the original function is `concat(left(id,3),'****',right(id,4))`.
-
-Desensitizes the input `digital_number` and returns the result after masking desensitization. `digital_number` is `BIGINT` data type.
-
### example
-1. Desensitize the cell phone number
+Desensitize the cell phone number
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+```sql
+select digital_masking(13812345678);
+```
-### keywords
-
-DIGITAL_MASKING
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index 6df9c79..d0dbea8 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -24,57 +24,57 @@
### Description
-AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying decryption is done using the OpenSSL library.
+AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the decrypted result, where:
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in variables.
-
-:::warning
-Until 2.1.6, function with two arguments will ignore session variable `block_encryption_mode` and always use `AES_128_ECB` to do decryption. So it's not recommended to use it.
-
-Since 2.1.7, it works as expected.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 2.1.7
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+------------------------------------------------------------------------------------------+
| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
+------------------------------------------------------------------------------------------+
| text |
+------------------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
```
-
-### Keywords
- AES_DECRYPT, AES, DECRYPT
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index abc0f61..e2414b6 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -25,28 +25,25 @@
### Description
-AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying encryption is done using the OpenSSL library.
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the encrypted result, where:
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
- `encryption_mode` is the encryption algorithm, optionally available in variable.
-:::warning
-Until 2.1.6, function with two arguments will ignore session variable `block_encryption_mode` and always use `AES_128_ECB` to do encryption. So it's not recommended to use it.
-
-Since 2.1.7, it works as expected.
-:::
-
-#### Remarks
+### Notice
For the incoming key, the AES_ENCRYPT function not directly uses, but will further process it. The specific steps are as follows:
+
1. According to the encryption algorithm used, determine the number of bytes of the key, for example, if you use the AES_128_ECB algorithm, the number of bytes of the key is `128 / 8 = 16` (if you use the AES_256_ECB algorithm, the number of bytes of the key is `128 / 8 = 32`). 2;
2. then for the key entered by the user, bits `i` and `16*k+i` are used to perform an isomorphism, followed by a zero if the key entered by the user is less than 16 bits. 3. finally, the newly generated key is used to generate a new key;
3. finally, the newly generated key is used for encryption.
@@ -54,36 +51,39 @@
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
+----------------------------------------------------------+
| wr2JEDVXzL9+2XtRhgIloA== |
+----------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.11 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3')); -- since 2.1.7
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
+----------------------------------------------------------+
| 3dym0E7/+1zbrLIaBVNHSw== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
+--------------------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
+--------------------------------------------------------------------+
| tsmK1HzbpnEdR2//WhO+MA== |
+--------------------------------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index 7236375..684289e 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
-
### description
-Calculates an MD5 128-bit checksum for the string
-#### Syntax
-`MD5(str)`
+Calculates an MD5 128-bit checksum for the string
+
+### Syntax
+
+```
+MD5(str)
+```
### example
+```sql
+select md5("abc");
```
-MySQL [(none)]> select md5("abc");
+
+```
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
\ No newline at end of file
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index a801e12..058d320 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
-
### description
-Calculates an MD5 128-bit checksum for the strings
-#### Syntax
-`MD5SUM(str[,str])`
+Calculates an MD5 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+MD5SUM(str[,str])
+```
### example
+```sql
+select md5("abcd");
```
-MySQL > select md5("abcd");
+
+```
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
\ No newline at end of file
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 8e9a457..e20343c 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,32 +22,26 @@
under the License.
-->
-## SHA
-
### description
Use SHA1 to digest the message.
-#### Syntax
+### Syntax
-`SHA(str)` or `SHA1(str)`
-
-#### Arguments
-
-- `str`: content to be encrypted
+``` sql
+{ SHA | SHA1 }(str)
+```
### example
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 0fa5dd5..0b01879 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -20,8 +20,84 @@
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.
+-->---
+{
+"title": "SHA2",
+"language": "en"
+}
+---
+
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
-->
+### description
+
+Use SHA2 to digest the message.
+
+### Syntax
+
+```sql
+SHA2(str, digest_length)
+```
+
+### Paramters
+
+- `str`: content to be encrypted
+- `digest_length`: the length of the digest. Support 224, 256, 384, 512
+
+### example
+
+```SQL
+select sha2('abc', 224);
+```
+
+```
++----------------------------------------------------------+
+| sha2('abc', 224) |
++----------------------------------------------------------+
+| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
++----------------------------------------------------------+
+```
+
+```sql
+select sha2('abc', 384);
+```
+
+```
++--------------------------------------------------------------------------------------------------+
+| sha2('abc', 384) |
++--------------------------------------------------------------------------------------------------+
+| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
++--------------------------------------------------------------------------------------------------+
+```
+
+```sql
+select sha2(NULL, 512);
+```
+
+```
++-----------------+
+| sha2(NULL, 512) |
++-----------------+
+| NULL |
++-----------------+
+```
+
+
## SHA2
### description
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 6dc63cd..fec317f 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
-
### description
-Calculates an SM3 256-bit checksum for the string
-#### Syntax
-`SM3(str)`
+Calculates an SM3 256-bit checksum for the string
+
+### Syntax
+
+```sql
+SM3(str)
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
\ No newline at end of file
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index b8b940a..bc4b679 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
-
### description
-Calculates an SM3 128-bit checksum for the strings
-#### Syntax
-`SM3SUM(str[,str])`
+Calculates an SM3 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+SM3SUM(str[,str])
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
\ No newline at end of file
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index cacfb63..72299cb 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -24,55 +24,58 @@
### Description
-#### Syntax
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_DECRYPT function is used to decrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the decrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
+
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in variables.
-
-:::warning
-Until 2.1.6, function with two arguments will ignore session variable `block_encryption_mode` and always use `SM4_128_ECB` to do decryption.
-
-Since 2.1.7, it works as expected.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.19 sec)
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 2.1.7
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('FSYstvOmH2cXy7B/072Mug=='), '***', '', 'SM4_128_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.11 sec)
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index 5d1b371..eecad29 100644
--- a/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/versioned_docs/version-2.1/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -24,55 +24,56 @@
### Description
-#### Syntax
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_ENCRYPT function is used to encrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the encrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
- `encryption_mode` is the encryption algorithm, optionally available in variable.
-:::warning
-Until 2.1.6, function with two arguments will ignore session variable `block_encryption_mode` and always use `SM4_128_ECB` to do encryption.
-
-Since 2.1.7, it works as expected.
-:::
-
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
+----------------------------------------------------------+
| aDjwRflBrDjhBZIOFNw3Tg== |
+----------------------------------------------------------+
-1 row in set (0.15 sec)
+```
-mysql> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 2.1.7
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_CBC')) |
+----------------------------------------------------------+
| FSYstvOmH2cXy7B/072Mug== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
diff --git a/versioned_docs/version-3.0/query-data/encryption-function.md b/versioned_docs/version-3.0/query-data/encryption-function.md
index 6612cdd..c9f7afa 100644
--- a/versioned_docs/version-3.0/query-data/encryption-function.md
+++ b/versioned_docs/version-3.0/query-data/encryption-function.md
@@ -26,179 +26,14 @@
Doris provides the following built-in encryption and masking functions. For detailed usage, please refer to the SQL manual.
-## AES_ENCRYPT
-
-An AES encryption function.
-
-This function behaves the same as the` AES_ENCRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Encryption is performed using the OpenSSL library as the underlying mechanism. Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
-
-```sql
-select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
-
-+--------------------------------+
-| to_base64(aes_encrypt('text')) |
-+--------------------------------+
-| wr2JEDVXzL9+2XtRhgIloA== |
-+--------------------------------+
-1 row in set (0.01 sec)
-```
-
-## AES_DECRYPT
-
-An AES decryption function. This function behaves the same as the `AES_DECRYPT` function in MySQL. It uses the AES_128_ECB algorithm by default, with PKCS7 padding mode. Decryption is performed using the OpenSSL library as the underlying mechanism.
-
-```sql
-select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
-+------------------------------------------------------+
-| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA==')) |
-+------------------------------------------------------+
-| text |
-+------------------------------------------------------+
-1 row in set (0.01 sec)
-```
-
-## MD5
-
-Calculates the MD5 128-bit hash.
-
-```sql
-MySQL [(none)]> select md5("abc");
-+----------------------------------+
-| md5('abc') |
-+----------------------------------+
-| 900150983cd24fb0d6963f7d28e17f72 |
-+----------------------------------+
-1 row in set (0.013 sec)
-```
-
-## MD5SUM
-
-Calculates the MD5 128-bit hash for multiple strings.
-
-```sql
-MySQL > select md5("abcd");
-+----------------------------------+
-| md5('abcd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.011 sec)
-
-MySQL > select md5sum("ab","cd");
-+----------------------------------+
-| md5sum('ab', 'cd') |
-+----------------------------------+
-| e2fc714c4727ee9395f324cd2e7f331f |
-+----------------------------------+
-1 row in set (0.008 sec)
-```
-
-## SM4_ENCRYPT
-
-SM4 encryption function.
-
-```sql
-MySQL > select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
-+--------------------------------+
-| to_base64(sm4_encrypt('text')) |
-+--------------------------------+
-| aDjwRflBrDjhBZIOFNw3Tg== |
-+--------------------------------+
-1 row in set (0.010 sec)
-
-MySQL > set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.001 sec)
-
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
-+----------------------------------------------------------------------------------+
-| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
-+----------------------------------------------------------------------------------+
-| G7yqOKfEyxdagboz6Qf01A== |
-+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
-```
-
-## SM3
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SM3SUM
-
-Calculates the SM3 256-bit hash for multiple strings.
-
-```sql
-MySQL > select sm3("abcd");
-+------------------------------------------------------------------+
-| sm3('abcd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
-MySQL > select sm3sum("ab","cd");
-+------------------------------------------------------------------+
-| sm3sum('ab', 'cd') |
-+------------------------------------------------------------------+
-| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
-+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-```
-
-## SHA
-
-Calculates the SHA1 hash using the SHA1 algorithm.
-
-## SHA2
-
-Calculates the SHA2 hash using SHA2 algorithm.
-
-```sql
-mysql> select sha2('abc', 224);
-+----------------------------------------------------------+
-| sha2('abc', 224) |
-+----------------------------------------------------------+
-| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
-+----------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2('abc', 384);
-+--------------------------------------------------------------------------------------------------+
-| sha2('abc', 384) |
-+--------------------------------------------------------------------------------------------------+
-| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
-+--------------------------------------------------------------------------------------------------+
-1 row in set (0.13 sec)
-
-mysql> select sha2(NULL, 512);
-+-----------------+
-| sha2(NULL, 512) |
-+-----------------+
-| NULL |
-+-----------------+
-1 row in set (0.09 sec)
-```
-
-## DIGITAL_MASKING
-
-An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-
-The `digital_number` is of type `BIGINT`.
-
-```sql
-mysql select digital_masking(13812345678);
-+------------------------------+
-| digital_masking(13812345678) |
-+------------------------------+
-| 138****5678 |
-+------------------------------+
-```
+- [AES_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt)
+- [AES_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt)
+- [SM4_ENCRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt)
+- [SM4_DECRYPT](../sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt)
+- [MD5](../sql-manual/sql-functions/encrypt-digest-functions/md5)
+- [MD5SUM](../sql-manual/sql-functions/encrypt-digest-functions/md5sum)
+- [SM3](../sql-manual/sql-functions/encrypt-digest-functions/sm3)
+- [SM3SUM](../sql-manual/sql-functions/encrypt-digest-functions/sm3sum)
+- [SHA](../sql-manual/sql-functions/encrypt-digest-functions/sha)
+- [SHA2](../sql-manual/sql-functions/encrypt-digest-functions/sha2)
+- [DIGITAL_MASKING](../sql-manual/sql-functions/digital-masking)
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/digital-masking.md b/versioned_docs/version-3.0/sql-manual/sql-functions/digital-masking.md
index 9ff7c30..a5178cd 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/digital-masking.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/digital-masking.md
@@ -24,33 +24,28 @@
under the License.
-->
-## DIGITAL_MASKING
-
### description
-#### Syntax
+An alias function with the original function being `CONCAT(LEFT(id,3),'****',RIGHT(id,4))`. Performs data masking on the input `digital_number` and returns the masked result.
-```
+### Syntax
+
+```sql
digital_masking(digital_number)
```
-Alias function, the original function is `concat(left(id,3),'****',right(id,4))`.
-
-Desensitizes the input `digital_number` and returns the result after masking desensitization. `digital_number` is `BIGINT` data type.
-
### example
-1. Desensitize the cell phone number
+Desensitize the cell phone number
- ```sql
- mysql> select digital_masking(13812345678);
- +------------------------------+
- | digital_masking(13812345678) |
- +------------------------------+
- | 138****5678 |
- +------------------------------+
- ```
+```sql
+select digital_masking(13812345678);
+```
-### keywords
-
-DIGITAL_MASKING
+```
++------------------------------+
+| digital_masking(13812345678) |
++------------------------------+
+| 138****5678 |
++------------------------------+
+```
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
index 8460c98..d0dbea8 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-decrypt.md
@@ -24,57 +24,57 @@
### Description
-AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying decryption is done using the OpenSSL library.
+AES decryption function. This function behaves like the `AES_DECRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the decrypted result, where:
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in variables.
-
-:::warning
-Until 3.0.2, function with two arguments will ignore session variable `block_encryption_mode` and always use `AES_128_ECB` to do decryption. So it's not recommended to use it.
-
-Since 3.0.3, it works as expected.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('wr2JEDVXzL9+2XtRhgIloA=='), '***', '', 'AES_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 3.0.3
+```
+--------------------------------------------------------------------------------+
| aes_decrypt(from_base64('3dym0E7/+1zbrLIaBVNHSw=='), '***', '', 'AES_256_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select AES_DECRYPT(FROM_BASE64('tsmK1HzbpnEdR2//WhO+MA=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+------------------------------------------------------------------------------------------+
| aes_decrypt(from_base64('tsmK1HzbpnEdR2//WhO+MA=='), '***', '0123456789', 'AES_256_CBC') |
+------------------------------------------------------------------------------------------+
| text |
+------------------------------------------------------------------------------------------+
-1 row in set (0.12 sec)
```
-
-### Keywords
- AES_DECRYPT, AES, DECRYPT
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
index fedad8e..e2414b6 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/aes-encrypt.md
@@ -25,28 +25,25 @@
### Description
-AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode. The underlying encryption is done using the OpenSSL library.
-Reference: https://dev.mysql.com/doc/refman/8.0/en/encryption-functions.html#function_aes-decrypt
+AES encryption function. This function behaves like the `AES_ENCRYPT` function in MySQL. By default, it uses the `AES_128_ECB` algorithm with `PKCS7` padding mode.
-#### Syntax
+### Syntax
-`VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+```sql
+VARCHAR AES_ENCRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
-Returns the encrypted result, where:
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
- `encryption_mode` is the encryption algorithm, optionally available in variable.
-:::warning
-Until 3.0.2, function with two arguments will ignore session variable `block_encryption_mode` and always use `AES_128_ECB` to do encryption. So it's not recommended to use it.
-
-Since 3.0.3, it works as expected.
-:::
-
-#### Remarks
+### Notice
For the incoming key, the AES_ENCRYPT function not directly uses, but will further process it. The specific steps are as follows:
+
1. According to the encryption algorithm used, determine the number of bytes of the key, for example, if you use the AES_128_ECB algorithm, the number of bytes of the key is `128 / 8 = 16` (if you use the AES_256_ECB algorithm, the number of bytes of the key is `128 / 8 = 32`). 2;
2. then for the key entered by the user, bits `i` and `16*k+i` are used to perform an isomorphism, followed by a zero if the key entered by the user is less than 16 bits. 3. finally, the newly generated key is used to generate a new key;
3. finally, the newly generated key is used for encryption.
@@ -54,36 +51,39 @@
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.10 sec)
+set block_encryption_mode='';
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_128_ECB')) |
+----------------------------------------------------------+
| wr2JEDVXzL9+2XtRhgIloA== |
+----------------------------------------------------------+
-1 row in set (0.12 sec)
+```
-mysql> set block_encryption_mode="AES_256_CBC";
-Query OK, 0 rows affected (0.11 sec)
+```sql
+set block_encryption_mode="AES_256_CBC";
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3')); -- since 3.0.3
+```
+----------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '', 'AES_256_CBC')) |
+----------------------------------------------------------+
| 3dym0E7/+1zbrLIaBVNHSw== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-mysql> select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(aes_encrypt('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+
+```
+--------------------------------------------------------------------+
| to_base64(aes_encrypt('text', '***', '0123456789', 'AES_256_CBC')) |
+--------------------------------------------------------------------+
| tsmK1HzbpnEdR2//WhO+MA== |
+--------------------------------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### Keywords
- AES_ENCRYPT, AES, ENCRYPT
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
index 7236375..684289e 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5.md
@@ -22,26 +22,26 @@
under the License.
-->
-## MD5
-
### description
-Calculates an MD5 128-bit checksum for the string
-#### Syntax
-`MD5(str)`
+Calculates an MD5 128-bit checksum for the string
+
+### Syntax
+
+```
+MD5(str)
+```
### example
+```sql
+select md5("abc");
```
-MySQL [(none)]> select md5("abc");
+
+```
+----------------------------------+
| md5('abc') |
+----------------------------------+
| 900150983cd24fb0d6963f7d28e17f72 |
+----------------------------------+
-1 row in set (0.013 sec)
```
-
-### keywords
-
- MD5
\ No newline at end of file
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
index a801e12..058d320 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/md5sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## MD5SUM
-
### description
-Calculates an MD5 128-bit checksum for the strings
-#### Syntax
-`MD5SUM(str[,str])`
+Calculates an MD5 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+MD5SUM(str[,str])
+```
### example
+```sql
+select md5("abcd");
```
-MySQL > select md5("abcd");
+
+```
+----------------------------------+
| md5('abcd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.011 sec)
+```
-MySQL > select md5sum("ab","cd");
+```sql
+select md5sum("ab","cd");
+```
+
+```
+----------------------------------+
| md5sum('ab', 'cd') |
+----------------------------------+
| e2fc714c4727ee9395f324cd2e7f331f |
+----------------------------------+
-1 row in set (0.008 sec)
-
```
-
-### keywords
-
- MD5SUM
\ No newline at end of file
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
index 8e9a457..e20343c 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha.md
@@ -22,32 +22,26 @@
under the License.
-->
-## SHA
-
### description
Use SHA1 to digest the message.
-#### Syntax
+### Syntax
-`SHA(str)` or `SHA1(str)`
-
-#### Arguments
-
-- `str`: content to be encrypted
+``` sql
+{ SHA | SHA1 }(str)
+```
### example
```SQL
-mysql> select sha("123");
+select sha("123");
+```
+
+```
+------------------------------------------+
| sha1('123') |
+------------------------------------------+
| 40bd001563085fc35165329ea1ff5c5ecbdbbeef |
+------------------------------------------+
-1 row in set (0.13 sec)
```
-
-### keywords
-
- SHA,SHA1
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
index 0fa5dd5..c482a23 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sha2.md
@@ -22,6 +22,82 @@
under the License.
-->
+### description
+
+Use SHA2 to digest the message.
+
+### Syntax
+
+```sql
+SHA2(str, digest_length)
+```
+
+### Paramters
+
+- `str`: content to be encrypted
+- `digest_length`: the length of the digest. Support 224, 256, 384, 512
+
+### example
+
+```SQL
+select sha2('abc', 224);
+```
+
+```
++----------------------------------------------------------+
+| sha2('abc', 224) |
++----------------------------------------------------------+
+| 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7 |
++----------------------------------------------------------+
+```
+
+```sql
+select sha2('abc', 384);
+```
+
+```
++--------------------------------------------------------------------------------------------------+
+| sha2('abc', 384) |
++--------------------------------------------------------------------------------------------------+
+| cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
++--------------------------------------------------------------------------------------------------+
+```
+
+```sql
+select sha2(NULL, 512);
+```
+
+```
++-----------------+
+| sha2(NULL, 512) |
++-----------------+
+| NULL |
++-----------------+
+```
+---
+{
+"title": "SHA2",
+"language": "en"
+}
+---
+
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+
## SHA2
### description
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
index 6dc63cd..fec317f 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3.md
@@ -22,26 +22,26 @@
under the License.
-->
-## SM3
-
### description
-Calculates an SM3 256-bit checksum for the string
-#### Syntax
-`SM3(str)`
+Calculates an SM3 256-bit checksum for the string
+
+### Syntax
+
+```sql
+SM3(str)
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
```
-
-### keywords
-
- SM3
\ No newline at end of file
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
index b8b940a..bc4b679 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm3sum.md
@@ -22,35 +22,38 @@
under the License.
-->
-## SM3SUM
-
### description
-Calculates an SM3 128-bit checksum for the strings
-#### Syntax
-`SM3SUM(str[,str])`
+Calculates an SM3 128-bit checksum for the strings
+
+### Syntax
+
+```sql
+SM3SUM(str[,str])
+```
### example
+```sql
+select sm3("abcd");
```
-MySQL > select sm3("abcd");
+
+```
+------------------------------------------------------------------+
| sm3('abcd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
+```
-MySQL > select sm3sum("ab","cd");
+```sql
+select sm3sum("ab","cd");
+```
+
+```
+------------------------------------------------------------------+
| sm3sum('ab', 'cd') |
+------------------------------------------------------------------+
| 82ec580fe6d36ae4f81cae3c73f4a5b3b5a09c943172dc9053c69fd8e18dca1e |
+------------------------------------------------------------------+
-1 row in set (0.009 sec)
-
```
-
-### keywords
-
- SM3SUM
\ No newline at end of file
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
index 6864fab..72299cb 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-decrypt.md
@@ -24,55 +24,58 @@
### Description
-#### Syntax
-`VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_DECRYPT function is used to decrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the decrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_DECRYPT(VARCHAR str, VARCHAR key_str [, VARCHAR init_vector [, VARCHAR encryption_mode]])
+```
+
+### Parameters
+
- `str` is the text to be decrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
-- `encryption_mode` is the encryption algorithm, optionally available in variables.
-
-:::warning
-Until 3.0.2, function with two arguments will ignore session variable `block_encryption_mode` and always use `SM4_128_ECB` to do decryption. So it's not recommended to use it.
-
-Since 3.0.3, it works as expected.
-:::
+- `encryption_mode` is the encryption algorithm, optionally available in variable.
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('aDjwRflBrDjhBZIOFNw3Tg=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('aDjwRflBrDjhBZIOFNw3Tg=='), '***', '', 'SM4_128_ECB') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.19 sec)
+```
-MySQL> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.006 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3');
+```
-mysql> select SM4_DECRYPT(FROM_BASE64('FSYstvOmH2cXy7B/072Mug=='),'F3229A0B371ED2D9441B830D21A390C3'); -- since 3.0.3
+```
+--------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('FSYstvOmH2cXy7B/072Mug=='), '***', '', 'SM4_128_CBC') |
+--------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------+
-1 row in set (0.11 sec)
+```
-MySQL > select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```sql
+select SM4_DECRYPT(FROM_BASE64('G7yqOKfEyxdagboz6Qf01A=='),'F3229A0B371ED2D9441B830D21A390C3', '0123456789');
+```
+
+```
+--------------------------------------------------------------------------------------------------------+
| sm4_decrypt(from_base64('G7yqOKfEyxdagboz6Qf01A=='), 'F3229A0B371ED2D9441B830D21A390C3', '0123456789') |
+--------------------------------------------------------------------------------------------------------+
| text |
+--------------------------------------------------------------------------------------------------------+
-1 row in set (0.012 sec)
```
-
-### Keywords
- SM4_DECRYPT, SM4, DECRYPT
diff --git a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
index c035956..1f9ed99 100644
--- a/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
+++ b/versioned_docs/version-3.0/sql-manual/sql-functions/encrypt-digest-functions/sm4-encrypt.md
@@ -24,55 +24,56 @@
### Description
-#### Syntax
-`VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])`
+SM4 is a China's national standard symmetric key encryption algorithm, widely used in finance, communications, e-commerce, and other fields. The SM4_ENCRYPT function is used to encrypt data using the SM4 algorithm. By default, it uses the `SM4_128_ECB` algorithm.
-Returns the encrypted result, where:
+### Syntax
+
+```sql
+VARCHAR SM4_ENCRYPT(VARCHAR str, VARCHAR key_str[, VARCHAR init_vector][, VARCHAR encryption_mode])
+```
+
+### Parameters
+
- `str` is the text to be encrypted;
- `key_str` is the key. Note that this key is not a hexadecimal encoding, but a string representation of the encoded key. For example, for 128-bit key encryption, `key_str` should be 16-length. If the key is not long enough, use **zero padding** to make it up. If it is longer than that, the final key is found using a cyclic xor method. For example, if the 128-bit key used by the algorithm finally is `key`, then `key[i] = key_str[i] ^ key_str[i+128] ^ key_str[i+256] ^ ...`
- `init_vector` is the initial vector to be used in the algorithm, this is only valid for some algorithms, if not specified then Doris will use the built-in value;
- `encryption_mode` is the encryption algorithm, optionally available in variable.
-:::warning
-Until 3.0.2, function with two arguments will ignore session variable `block_encryption_mode` and always use `SM4_128_ECB` to do encryption. So it's not recommended to use it.
-
-Since 3.0.3, it works as expected.
-:::
-
### Example
```sql
-mysql> set block_encryption_mode='';
-Query OK, 0 rows affected (0.11 sec)
+set block_encryption_mode='';
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_ECB')) |
+----------------------------------------------------------+
| aDjwRflBrDjhBZIOFNw3Tg== |
+----------------------------------------------------------+
-1 row in set (0.15 sec)
+```
-mysql> set block_encryption_mode="SM4_128_CBC";
-Query OK, 0 rows affected (0.10 sec)
+```sql
+set block_encryption_mode="SM4_128_CBC";
+select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3'));
+```
-mysql> select TO_BASE64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3')); --- since 3.0.3
+```
+----------------------------------------------------------+
| to_base64(sm4_encrypt('text', '***', '', 'SM4_128_CBC')) |
+----------------------------------------------------------+
| FSYstvOmH2cXy7B/072Mug== |
+----------------------------------------------------------+
-1 row in set (0.14 sec)
+```
-MySQL > select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```sql
+select to_base64(SM4_ENCRYPT('text','F3229A0B371ED2D9441B830D21A390C3', '0123456789'));
+```
+----------------------------------------------------------------------------------+
| to_base64(sm4_encrypt('text', 'F3229A0B371ED2D9441B830D21A390C3', '0123456789')) |
+----------------------------------------------------------------------------------+
| G7yqOKfEyxdagboz6Qf01A== |
+----------------------------------------------------------------------------------+
-1 row in set (0.014 sec)
```
-
-### Keywords
- SM4_ENCRYPT, SM4, ENCRYPT
