title: Encrypt/decrypt personal data
body: <p>I have a scenario where I need to encrypt personal(not sensitive) data like name, phone number, address etc. The idea is to use AES with 128-bit key. Should I used the same key stored somewhere in the configuration files for encryption of all user's data ? Or we should generate a new key for each user and store it in the database corresponding to each user.</p>