# Requirements for Derby encryption

Derby supports disk encryption and requires an encryption provider.

An encryption provider implements the Java cryptography concepts. The Java Runtime Environment (JRE) for Java SE includes Java Cryptographic Extensions (JCE, part of the Java Cryptography Architecture) and one or more default encryption providers. For more information, see the Java Cryptography Architecture (JCA) Reference Guide at http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html.

The JRE determines the default encryption provider as follows:

- The JRE's provider is the default.
- If your environment for some reason does not include a provider, it must be specified.

Parent topic: Configuring database encryption
Related concepts
Working with encryption