Oracle TDE provides flexible encryption options for both database and tablespace levels. The default encryption standard for database and tablespace encryption is AES128, while AES192 is used for column-level encryption. For added security, a random string, known as SALT, is appended to plaintext before encryption in column-level encryption. SALT enhances security but cannot be applied to indexed columns.