Re: Moving forward with TDE [PATCH v3] - Mailing list pgsql-hackers

From Andres Freund
Subject Re: Moving forward with TDE [PATCH v3]
Date
Msg-id 20231104025314.klj7kxucielpviwn@awork3.anarazel.de
Whole thread Raw
In response to Re: Moving forward with TDE [PATCH v3]  (Andres Freund <andres@anarazel.de>)
Responses Re: Moving forward with TDE [PATCH v3]
List pgsql-hackers
On 2023-11-02 19:32:28 -0700, Andres Freund wrote:
> > From 327e86d52be1df8de9c3a324cb06b85ba5db9604 Mon Sep 17 00:00:00 2001
> > From: David Christensen <david@pgguru.net>
> > Date: Fri, 29 Sep 2023 15:16:00 -0400
> > Subject: [PATCH v3 5/5] Add encrypted/authenticated WAL
> >
> > When using an encrypted cluster, we need to ensure that the WAL is also
> > encrypted. While we could go with an page-based approach, we use instead a
> > per-record approach, using GCM for the encryption method and storing the AuthTag
> > in the xl_crc field.

What was the reason for this decision?

?



pgsql-hackers by date:

Previous
From: David Rowley
Date:
Subject: Re: Pre-proposal: unicode normalized text
Next
From: Andres Freund
Date:
Subject: Re: Add the ability to limit the amount of memory that can be allocated to backends.