Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iZ9Ul-0000Ja-TY for pgsql-hackers@arkaria.postgresql.org; Mon, 25 Nov 2019 08:13:20 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1iZ9Uk-0001Mh-Ld for pgsql-hackers@arkaria.postgresql.org; Mon, 25 Nov 2019 08:13:18 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iZ9Uk-0001MZ-CE for pgsql-hackers@lists.postgresql.org; Mon, 25 Nov 2019 08:13:18 +0000 Received: from wout4-smtp.messagingengine.com ([64.147.123.20]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iZ9Uh-0007fd-Iv for pgsql-hackers@lists.postgresql.org; Mon, 25 Nov 2019 08:13:18 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 2179162C; Mon, 25 Nov 2019 03:13:13 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Mon, 25 Nov 2019 03:13:13 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=GMIGLm7WgIZWO0tCmnCS/EoTmYy f5MRRAEOyAIfBb+A=; b=LvDJZAPQ5Acz6VgIVK1GpZr74zRRL99XP/Hsx3kaEgk bYzMbb/B/SLjd34+l6ShtURA0UqCFVbsl+ZmxOkNIdk/Inq2r6bO/WG5d1YbWk2Q tWSET27YFrDfnD3px9DdylCzrutBXrRdqqwc91ZfjVKjCAKymB6Y5V0jTCktaxQt BSDLYp+mMPIZzfh/Q3eln98/NPHQbzz/Buc/iWGVEl0MaEKnzYQP2YmRdHXImPDv vWdZHJHhF2S+ztXCgyD81iubxdSh+LNe1fjq23RmZqCOxlE2JZoOqIBgFahPGP1Z A2qd2ereLtOfWpGpNzC7Ls1DTWLiqv+R/aV1aTmwzXg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=GMIGLm 7WgIZWO0tCmnCS/EoTmYyf5MRRAEOyAIfBb+A=; b=iBQbcuEl4ia8Vpf9ZFWpq8 RfFH4iGMAfTrPTDsTPJy2GEGF7AnfQLV9b+OA/eJxd75YlKO3eV0lijikhd3Ejfy BqiQV57tQhkzBn20nzxDVn3y57sPiHAOq4lLnUFyKweDewPgjxHLoPKzDhhECKUT /Te7EjFHqltxsa/p6DfNrsuOKK64nBzM5/F/nzB79MI76Xtll8wtXIBs3dQ06FLZ bpTtyOpVZ4+yyYRktdFd3XN7HZ/qP9W6awwt86l42lZAe47uPcRHN6FSkvKK2VKo gpewRRwWwgr7CUEkDKSNkNJxBgtyUvREJU6VkSZfqRh8ThmDriYlqsN5nl6lXGzw == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedrudeitddgheejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne gfrhhlucfvnfffucdljedtmdenucfjughrpeffhffvuffkfhggtggujgesghdtreertddt vdenucfhrhhomhepofhitghhrggvlhcurfgrqhhuihgvrhcuoehmihgthhgrvghlsehprg hquhhivghrrdighiiiqeenucfkphepudduuddruddtvddrudektddrudekheenucfrrghr rghmpehmrghilhhfrhhomhepmhhitghhrggvlhesphgrqhhuihgvrhdrgiihiienucevlh hushhtvghrufhiiigvpedt X-ME-Proxy: Received: from paquier.xyz (ee0822lan1.rev.em-net.ne.jp [111.102.180.185]) by mail.messagingengine.com (Postfix) with ESMTPA id 5C7D53060057; Mon, 25 Nov 2019 03:13:10 -0500 (EST) Date: Mon, 25 Nov 2019 17:13:07 +0900 From: Michael Paquier To: Antonin Houska Cc: Alvaro Herrera , Shawn Wang , pgsql-hackers@lists.postgresql.org, Ants Aasma Subject: Re: WIP: Data at rest encryption Message-ID: <20191125081307.GO99720@paquier.xyz> References: <20190903165615.GA16727@alvherre.pgsql> <64821.1567572978@antos> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="xexMVKTdXPhpRiVT" Content-Disposition: inline In-Reply-To: <64821.1567572978@antos> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --xexMVKTdXPhpRiVT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Wed, Sep 04, 2019 at 06:56:18AM +0200, Antonin Houska wrote: > This thread started later than our effort but important design questions are > being discussed there. So far there seems to be no consensus whether > full-instance encryption should be implemented first, so any effort spent on > this patch might get wasted. When/if there will be an agreement on the design, > we'll see how much of this patch can be used. I see. I have marked the patch as returned with feedback in CF 2019-11. Let's see how the other one finishes, before perhaps coming back to this one. -- Michael --xexMVKTdXPhpRiVT Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAl3bjRMACgkQnvQgOdby QH2Hng//d7vV+48zy/DsKV5OkJBabHszqtqXmnbUr8JdPF9J3YBOUE8qFWOqalKH piNeEtqQKR6SYGvVQ2jr4XwaBX6aCNaQXMT0ezHFt4NZF3i6PmhfbnJzKGESC2Nl FczUqxt7QoOH597hZyeTh7ZjxeNt+c2uCGrTHSdb+jgjb/Tjh1uautnk1eUxwWIk 2TS2LE8d1evROscR/GWCvZCAybZhMtcb8aI1/xpC3yRxFxqCZ6kgBkguGZ1xoiIF EDThWucg8h0tv3A5ebI6v7OiKTeQrNtkImCSL/q7tb6MUqCcEQ8rZ9T10oGFQzah v2toI5zNiWedb+oN9Jq0GMH7yyn7lP0BRkd6LeSerO1q75UnzBvMiYrNCsiQiA8B 6KQUIfsCRXDjwqGmmXoQsRjCgBboI5AN94xzwtFt0X4LBHrhbhqO2FzuSV0PBYnS oMwsyihwfsIh2qSLd/2MGfmH/SdnmMf2Y4ic+EcR4Qkg+PaLhcQ8Uw+13PZfL6aV 0PpKzUFoe1sA8q28FvS8+kTznq0m4pFqqvrYlmuPavXYLBRTbZ/kgkvhfv1iZmRK Yvh5FqlEL2kgjLAuDRyYpEUznJlmTQfk+XZzfZI7e7sNk20IfHkuv5T8mGEMYlpt rGKghK0ybQ38JNUIK5x5k/MyIQmb4zld2IwxFhjF7mhYYisirR0= =B910 -----END PGP SIGNATURE----- --xexMVKTdXPhpRiVT--