Received: from maia.hub.org (maia-2.hub.org [200.46.204.251])
	by mail.postgresql.org (Postfix) with ESMTP id CDD9E632E45
	for <pgsql-admin-postgresql.org@mail.postgresql.org>;
	Fri, 16 Jul 2010 13:57:10 -0300 (ADT)
Received: from mail.postgresql.org ([200.46.204.86])
	by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia,
	port 10024) with ESMTP id 03360-06 for
	<pgsql-admin-postgresql.org@mail.postgresql.org>;
	Fri, 16 Jul 2010 16:57:03 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from mail-pv0-f174.google.com (mail-pv0-f174.google.com
	[74.125.83.174])
	by mail.postgresql.org (Postfix) with ESMTP id 9860B632BE7
	for <pgsql-admin@postgresql.org>; Fri, 16 Jul 2010 13:57:02 -0300 (ADT)
Received: by pvc7 with SMTP id 7so871469pvc.19
	for <pgsql-admin@postgresql.org>; Fri, 16 Jul 2010 09:57:01 -0700 (PDT)
Received: by 10.114.75.2 with SMTP id x2mr1855860waa.213.1279299405582;
	Fri, 16 Jul 2010 09:56:45 -0700 (PDT)
Received: from Craig-Jamess-MacBook-Pro.local
	(wsip-70-167-124-126.sd.sd.cox.net [70.167.124.126])
	by mx.google.com with ESMTPS id d35sm24665586waa.21.2010.07.16.09.56.43
	(version=SSLv3 cipher=RC4-MD5); Fri, 16 Jul 2010 09:56:44 -0700 (PDT)
Message-ID: <4C408F49.10605@emolecules.com>
Date: Fri, 16 Jul 2010 09:56:41 -0700
From: Craig James <craig_james@emolecules.com>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US;
	rv:1.9.1.10) Gecko/20100512 Thunderbird/3.0.5
MIME-Version: 1.0
To: pgsql-admin@postgresql.org
Subject: secret key for encryption
References: <4C4038AC0200002500033716@gw.wicourts.gov>
	<4C4038EC0200002500033719@gw.wicourts.gov>
	<4C4038EC0200002500033719@gw.wicourts.gov>
In-Reply-To: <4C4038EC0200002500033719@gw.wicourts.gov>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=-0.001 tagged_above=-10 required=5
	tests=BAYES_20=-0.001, RCVD_IN_DNSWL_NONE=-0.0001
X-Spam-Level: 
X-Archive-Number: 201007/111
X-Sequence-Number: 35130

This isn't exactly a Postgres question, but I hope someone in the community has solved it.

I want to encrypt some data in Postgres that arrives from Apache.  How do you store an encryption key in such a way that Apache CGIs can get it, but a hacker or rogue employee who manages to access the machine can't find out the encryption key?

Thanks,
Craig