Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-14 Thread Ivan Voras
On 09/04/2014 22:40, CS_DBA wrote: > Hi All; > > We have a client with this requirement: > > At rest data must be encrypted with a unique client key > > Any thoughts on how to pull this off for PostgreSQL stored data? Some time ago I did this, mostly as an experiment but IIRC it works decently:

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-10 Thread Guy Helmer
On Apr 9, 2014, at 3:40 PM, CS_DBA wrote: > Hi All; > > We have a client with this requirement: > > At rest data must be encrypted with a unique client key > > Any thoughts on how to pull this off for PostgreSQL stored data? Does there happen to be a Postgresql proxy, such as a modified pgbou

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread Tomas Vondra
On 9.4.2014 23:28, Martijn van Oosterhout wrote: > On Wed, Apr 09, 2014 at 02:16:34PM -0700, Ken Tanzer wrote: >>> Any thoughts on how to pull this off for PostgreSQL stored data? >>> >>> I looked at this a while ago because I have clients who might >> require this in the future. ISTM you should be

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread Bruce Momjian
On Wed, Apr 9, 2014 at 01:52:51PM -0700, John R Pierce wrote: > On 4/9/2014 1:40 PM, CS_DBA wrote: > >Hi All; > > > >We have a client with this requirement: > > > >At rest data must be encrypted with a unique client key > > > >Any thoughts on how to pull this off for PostgreSQL stored data? > > e

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread Ken Tanzer
On Wed, Apr 9, 2014 at 2:32 PM, John R Pierce wrote: > On 4/9/2014 2:16 PM, Ken Tanzer wrote: > >> I looked at this a while ago because I have clients who might require >> this in the future. ISTM you should be able to have your PG data directory >> stored on an encrypted filesystem. I believe

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread John R Pierce
On 4/9/2014 2:07 PM, Rob Sargent wrote: encrypt the data in the client application before sending it to the database server, decrypt it in the client when you need it back. How does that affect backend sql reporting?\ does this backend sql reporting system need access to the contents of t

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread John R Pierce
On 4/9/2014 2:16 PM, Ken Tanzer wrote: I looked at this a while ago because I have clients who might require this in the future. ISTM you should be able to have your PG data directory stored on an encrypted filesystem. I believe this will decrease performance, but I have no idea by how much.

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread Martijn van Oosterhout
On Wed, Apr 09, 2014 at 02:16:34PM -0700, Ken Tanzer wrote: > > Any thoughts on how to pull this off for PostgreSQL stored data? > > > > I looked at this a while ago because I have clients who might require this > in the future. ISTM you should be able to have your PG data directory > stored on an

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread Ken Tanzer
> > On 04/09/2014 02:52 PM, John R Pierce wrote: > > On 4/9/2014 1:40 PM, CS_DBA wrote: > > Hi All; > > We have a client with this requirement: > > At rest data must be encrypted with a unique client key > > Any thoughts on how to pull this off for PostgreSQL stored data? > > I looked at this a whi

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread Rob Sargent
On 04/09/2014 02:52 PM, John R Pierce wrote: On 4/9/2014 1:40 PM, CS_DBA wrote: Hi All; We have a client with this requirement: At rest data must be encrypted with a unique client key Any thoughts on how to pull this off for PostgreSQL stored data? encrypt the data in the client application

Re: [GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread John R Pierce
On 4/9/2014 1:40 PM, CS_DBA wrote: Hi All; We have a client with this requirement: At rest data must be encrypted with a unique client key Any thoughts on how to pull this off for PostgreSQL stored data? encrypt the data in the client application before sending it to the database server, de

[GENERAL] encrypting data stored in PostgreSQL

2014-04-09 Thread CS_DBA
Hi All; We have a client with this requirement: At rest data must be encrypted with a unique client key Any thoughts on how to pull this off for PostgreSQL stored data? Thanks in advance -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscript