We intend to encrypt certain values in a database which holds personal information such as addresses so as to prevent data leakage should the database be compromised.
The intention is that each field is individually encrypted with AES GCM with a 128-bit key and 128-bit randomly generated nonce. Fields will generally be quite short in length so there will be many short values encrypted with the same key.
AES GCM was chosen on the basis that it provides authentication in addition to encryption.
There will be approximately 50 million data items with 30 fields each. The intention is to use different keys for subsets of the fields, so likely 5-10 keys initially.
Would AES GCM be suitable for use in this scenario?