> What I think Tomas is getting at here is that we don't write a page only > once.
> A nonce of tableoid+pagenum will only be unique the first time we write > out that page. Seems unlikely that we're only going to be writing these > pages once though- what we need is a nonce that's unique for *every > write* of the 8k page, isn't it? As every write of the page is going to > be encrypting something new.
> With sufficient randomness, we can at least be more likely to have a > unique nonce for each 8K write. Including the LSN seems like it'd be a > possible alternative.
Agreed. I know little of the inner details about the LSN but what I read in [1] sounds encouraging in addition to tableoid + pagenum.