On 7/9/19 4:12 PM, Tomas Vondra wrote: > On Tue, Jul 09, 2019 at 03:50:39PM -0400, Bruce Momjian wrote: >>On Tue, Jul 9, 2019 at 02:09:38PM -0400, Joe Conway wrote:
>>> the input nonce used to generate the IV could be something like >>> pg_class.oid and blocknum concatenated together with some delimiting >>> character as long as we guarantee that we generate different keys in >>> different databases. <snip> > Ot you could just encrypt them with a different key, and you would not > need to make database OID part of the nonce. Yeah that was pretty much exactly what I was trying to say above ;-) Joe -- Crunchy Data - http://crunchydata.com PostgreSQL Support for Secure Enterprises Consulting, Training, & Open Source Development
signature.asc
Description: OpenPGP digital signature
