Before checking if varbinary is supported, do you really need to go to all of this trouble? Can you not just use AS security to prevent users from seeing the age or do you really need it encrypted in memory within the AS memory space too? Otherwise, can
you not rather just store the encrypted value as a string rather than binary and decrypt the string?