Where needed, the enclave can decrypt the data and then perform its computations and data processing on the plaintext. But neither the data nor the column encryption keys are exposed in plaintext ...