Re: TDE in PostgreSQL
Hans-Jürgen Schönig <postgres@cybertec.at>
From: "Hans-Jürgen Schönig (PostgreSQL)" <postgres@cybertec.at>
To: Fabien COELHO <coelho@cri.ensmp.fr>
Cc: Євген Панченко <slamgp1987@gmail.com>, PostgreSQL Bugs <pgsql-bugs@lists.postgresql.org>
Date: 2020-07-10T12:26:56Z
Lists: pgsql-bugs
hi … actually we are trying to push encryption into core … so far there is no success. our stuff is working and we use it at many clients already without any issues. you can download a TDE enabled version of postgres from our website for free: https://www.cybertec-postgresql.com/en/products/postgresql-transparent-data-encryption/ <https://www.cybertec-postgresql.com/en/products/postgresql-transparent-data-encryption/> just ask me directly (hs@cybertec.at <mailto:hs@cybertec.at>) if you got any questions. many thanks, hans > On 10.07.2020, at 13:52, Fabien COELHO <coelho@cri.ensmp.fr> wrote: > > >> Hello, very hard to find some information about TDE ( Transparent Data >> Encryption ) in PostgreSQL. Could you answer my question? >> 1) Do PostgreSQL supported TDE ( Transparent Data Encryption )? > > No, which explain why informations are hard to come:-) > > This is not a bug, but the absence of a feature. > > Note that encryption can occur at many levels, which level is relevant depends on the threat model: > 1. the app can encrypt data in tables > 2. the database can encrypt its files > 3. the os can encrypt a partition > 4. the disks can encrypt their data > > 1. can be done with a pg extension (ISTM that several exist). 3. depends on the OS (data at rest encryption), 4 depends on the hardware. Some people are working on implementing some form of (2). > > -- > Fabien. > > -- Cybertec PostgreSQL International GmbH Gröhrmühlgasse 26, A-2700 Wiener Neustadt Web: https://www.cybertec-postgresql.com <https://www.cybertec-postgresql.com/>