I'm in the process of selecting a product for data masking sensitive information in our DB so that developers won't see restricted information while testing production data.
I came across some articles and software that were talking about encrypting this data, and my supervisor seemed interested. I tried to get my head around it for a while but I can only see it as a hassle with no benefit whatsoever: data which needs to be secured is already encrypted and masked data will never be decrypted (if unmasked data is required for some reason, then a request to the responsible DBA will be issued, who then will dump data from the relative production database). From what I understand keys are also discarded.
Am I right or does encrypting has actually some benefit relative to data masking?