Received: from maia.hub.org (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 576D3633270 for ; Mon, 5 Apr 2010 18:02:12 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 95974-01 for ; Mon, 5 Apr 2010 21:01:59 +0000 (UTC) X-Greylist: delayed 00:05:53.314478 by SQLgrey-1.7.6 Received: from mail-vw0-f46.google.com (mail-vw0-f46.google.com [209.85.212.46]) by mail.postgresql.org (Postfix) with ESMTP id 17189634D5D for ; Mon, 5 Apr 2010 18:01:16 -0300 (ADT) Received: by vws13 with SMTP id 13so1592873vws.19 for ; Mon, 05 Apr 2010 14:01:15 -0700 (PDT) Received: by 10.220.48.22 with SMTP id p22mr2923784vcf.213.1270500919988; Mon, 05 Apr 2010 13:55:19 -0700 (PDT) Received: from ANIBALVAIO ([200.85.62.34]) by mx.google.com with ESMTPS id 8sm3025007yxb.7.2010.04.05.13.55.17 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 05 Apr 2010 13:55:19 -0700 (PDT) From: Anibal David Acosta To: "'Scott Marlowe'" , "'Timothy Madden'" Cc: "'Joe Conway'" , References: <4BB774D4.3070306@joeconway.com> In-Reply-To: Subject: Re: Database level encryption Date: Mon, 5 Apr 2010 17:55:23 -0300 Message-ID: <000b01cad502$52774700$f765d500$@net.py> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcrU/5Z8Gt5rPtoaTuuhkfTbVI47xwAAnEkw Content-Language: es-py X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.11 tagged_above=-10 required=5 tests=BAYES_05=-1.11 X-Spam-Level: X-Archive-Number: 201004/49 X-Sequence-Number: 34143 TrueCrypt is a free open source application, can encrypt any drive or = create a virtual encrypted drive. -----Mensaje original----- De: pgsql-admin-owner@postgresql.org [mailto:pgsql-admin-owner@postgresql.org] En nombre de Scott Marlowe Enviado el: lunes, 05 de abril de 2010 05:35 p.m. Para: Timothy Madden CC: Joe Conway; pgsql-admin@postgresql.org Asunto: Re: [ADMIN] Database level encryption On Mon, Apr 5, 2010 at 2:30 PM, Timothy Madden wrote: > My scenario is how to protect the database if the machine is stolen > (it is a mini-laptop), and > I would like to encrypt the entire database, that is all columns of > all tables, and if possible > everything else found in the database. > > I would like all searching and sorting functions, just like with a > normal database (that is, > transparent encryption for the application level). The password will > be entered by a human in > order to start the application. The application exits after three > unsuccessful attempts, but > nothing prevents the user to start the application again; the number > of failures is not counted. > However if the database could count that I would not mind. I want a > single password for > data access to the entire database, there is only one database user > involved anyway. > > I do not =A0see the careful analysis required that you write about, I > would say I am asking for > SGBD support for database-level encryption. Everything you've said so far points to using a mounted encrypted drive to store the db. Windows and Linux both support this, and I'm sure Mac does too. The fact that a different tool is needed for each OS might be an issue. It's dirt simple to setup an encrypted drive on linux where the user types in the passphrase on each boot. Some laptops have wonky behaviour bringing up drives on USB at bootup tho (I'm looking at a Dell that's sitting in the cube next to me that has issues a BIOS update can't fix.) --=20 Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin