Have encryption capabilities in ORM ever been considered? There are a few 3rd party libraries, like Jasypt, providing UserTypes to handle encryption behind the scenes. Even basic support for an @Encrypt annotation, hashing, and configurable salt values would be helpful. Brett Meyer Red Hat Software Engineer, Hibernate