I'm building a website in C# 8 (.NET) with Oracle 19c as the database, and I need to encrypt sensitive banking data. The goal of the project is to prevent leaks of sensitive data.

The obvious approach would be to encrypt the data before storing it and decrypt it on the C# side. However, my solution relies on many PL/SQL stored procedures that also need to read this data, so I can't simply handle encryption/decryption only in the application layer.

Is it possible to encrypt the data and decrypt it on the database side in a secure way, so that the stored procedures can still work with it?

What are the recommended approaches for this scenario?