Re: Encryption in pg_dump - Mailing list pgsql-admin

From Paul Förster
Subject Re: Encryption in pg_dump
Date
Msg-id 0EF8B591-3363-4D66-AEB8-CC1F34A53DD7@gmail.com
Whole thread Raw
In response to Re: Encryption in pg_dump  (Tal Glo <glozmantal@gmail.com>)
Responses Re: Encryption in pg_dump  (Ron <ronljohnsonjr@gmail.com>)
Re: Encryption in pg_dump  (Tal Glo <glozmantal@gmail.com>)
List pgsql-admin
Hi Tal,

> On 23. Jul, 2020, at 10:27, Tal Glo <glozmantal@gmail.com> wrote:
> There is a way to implement full homomorphic encryption (FHE) with Postgres.

ok.

> I've used a relatively old version (2.3.1) of Microsoft's SEAL library in my University project for that.

I don't know about Windows but I assume, Linux would be similar?

> 2. Handling queries related to FHE encrypted attributes on the server side requires an implementation of own C
languagefunctions. 

we don't do that. Also, we have third party applications. In case they need to be modified, this is impossible.

> It's not always a good Idea to say that something cannot be done or that some one needs to be replaced. Sometimes
it'sworth to develop some new process, based on a mixture of available technologies out there. 

right, but only if it makes sense. To put a wallet in the file system and its key right next to it does not make sense
butonly serves to make IT heads and security "gurus" go quiet. In these cases, only replacing them by competent ones
helps.

Cheers,
Paul


pgsql-admin by date:

Previous
From: Tal Glo
Date:
Subject: Re: Encryption in pg_dump
Next
From: Ron
Date:
Subject: Re: Encryption in pg_dump