Re: PostgreSQL : encryption with pgcrypto - Mailing list pgsql-general

From Bruce Momjian
Subject Re: PostgreSQL : encryption with pgcrypto
Date
Msg-id 20180625142233.GD20745@momjian.us
Whole thread Raw
In response to PostgreSQL : encryption with pgcrypto  (ROS Didier <didier.ros@edf.fr>)
List pgsql-general
On Thu, May 17, 2018 at 07:07:00AM +0000, ROS Didier wrote:
> Hi
> 
>                Regarding the encryption of data by pgcrypto, I would like to
> know the recommendations for the management of the key.
> 
>                Is it possible to store it off the PostgreSQL server?
> 
>                Is there the equivalent of Oracle "wallet" ?

Late reply, but the last presentation on this page shows how to use
cryptographic hardware with Postgres:

    https://momjian.us/main/presentations/security.html

You could modify that to use a key management system (KMS).

-- 
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

+ As you are, so once was I.  As I am, so you will be. +
+                      Ancient Roman grave inscription +


pgsql-general by date:

Previous
From: Akshaya Acharya
Date:
Subject: Re: Too many range table entries error
Next
From: Anto Aravinth
Date:
Subject: Re: Using COPY to import large xml file