Re: Transparent Data Encryption (TDE) and encrypted files - Mailing list pgsql-hackers

From Moon, Insung
Subject Re: Transparent Data Encryption (TDE) and encrypted files
Date
Msg-id CAEMmqBu+PWgH8zUTBWNfg9chy8Ga1+08oSu-DTR0w+bM8x7=Vw@mail.gmail.com
Whole thread Raw
In response to Transparent Data Encryption (TDE) and encrypted files  (Bruce Momjian <bruce@momjian.us>)
List pgsql-hackers
Dear hackers.

First, I don't know which email thread should written a reply,
therefore using the first email thread.
Sorry about the inconvenience...

Sawada-san and I have previously researched the PostgreSQL database
cluster file that contains user data.
The result has been updated to the WIKI page[1], so share it here.

This result is simply a list of files that contain user data, so we
can think of it as the first step in classifying which files are
encrypted.
About the SLUR file that we have talked about so far, I think that
discussions are in progress on the necessity of encryption, and I hope
that this discussion will be useful.
#In proceeding with the current development, we specified an encrypted
file using the list above.

If the survey results are different, it would be a help for this
project if correct to the WIKI page.

[1]
https://wiki.postgresql.org/wiki/Transparent_Data_Encryption#List_of_the_contains_of_user_data_for_PostgreSQL_files

Best regards.
Moon.

On Tue, Oct 1, 2019 at 6:26 AM Bruce Momjian <bruce@momjian.us> wrote:
>
> For full-cluster Transparent Data Encryption (TDE), the current plan is
> to encrypt all heap and index files, WAL, and all pgsql_tmp (work_mem
> overflow).  The plan is:
>
>         https://wiki.postgresql.org/wiki/Transparent_Data_Encryption#TODO_for_Full-Cluster_Encryption
>
> We don't see much value to encrypting vm, fsm, pg_xact, pg_multixact, or
> other files.  Is that correct?  Do any other PGDATA files contain user
> data?
>
> --
>   Bruce Momjian  <bruce@momjian.us>        http://momjian.us
>   EnterpriseDB                             http://enterprisedb.com
>
> + As you are, so once was I.  As I am, so you will be. +
> +                      Ancient Roman grave inscription +
>
>



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: WIP: raise error when submitting invalid ALTER SYSTEM command
Next
From: Antonin Houska
Date:
Subject: Re: Transparent Data Encryption (TDE) and encrypted files