PostgreSQL : encryption with pgcrypto

Started by ROS Didieralmost 8 years ago2 messagesgeneral
Jump to latest
#1ROS Didier
didier.ros@edf.fr

Hi
Regarding the encryption of data by pgcrypto, I would like to know the recommendations for the management of the key.
Is it possible to store it off the PostgreSQL server?
Is there the equivalent of Oracle "wallet" ?

Thanks in advance

Best Regards
[cid:image002.png@01D14E0E.8515EB90]

Didier ROS
Expertise SGBD
DS IT/IT DMA/Solutions Groupe EDF/Expertise Applicative - SGBD
Nanterre Picasso - E2 565D (aile nord-est)
32 Avenue Pablo Picasso
92000 Nanterre
didier.ros@edf.fr<mailto:didier.ros@edf.fr>

Attachments:

image001.pngimage/png; name=image001.pngDownload
#2Bruce Momjian
bruce@momjian.us
In reply to: ROS Didier (#1)
Re: PostgreSQL : encryption with pgcrypto

On Thu, May 17, 2018 at 07:07:00AM +0000, ROS Didier wrote:

Hi

Regarding the encryption of data by pgcrypto, I would like to
know the recommendations for the management of the key.

Is it possible to store it off the PostgreSQL server?

Is there the equivalent of Oracle "wallet" ?

Late reply, but the last presentation on this page shows how to use
cryptographic hardware with Postgres:

https://momjian.us/main/presentations/security.html

You could modify that to use a key management system (KMS).

--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ As you are, so once was I.  As I am, so you will be. +
+                      Ancient Roman grave inscription +