Date: Tue, 1 Feb 2022 12:50:46 -0500
From: Bruce Momjian <bruce@momjian.us>
To: Antonin Houska <ah@cybertec.at>
Cc: Stephen Frost <sfrost@snowman.net>, Sasasu <i@sasa.su>,
	Robert Haas <robertmhaas@gmail.com>,
	Andres Freund <andres@anarazel.de>,
	PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: XTS cipher mode for cluster file encryption
Message-ID: <Yfly9vkads7pipaW@momjian.us>
References: <20211015192248.GP20998@tamriel.snowman.net>
 <20211015212109.ugwjuhe4lzymnorg@alap3.anarazel.de>
 <CA+TgmoaMHLXrxOj1HA+K=Z_qqgZUOpfdto8+QiVXsfP0ds+ojw@mail.gmail.com>
 <4b73c57e-0941-9e66-ea7e-087793c4c927@sasa.su>
 <20211019185456.GV20998@tamriel.snowman.net>
 <20211023160336.GB22621@momjian.us>
 <20211025155814.GD20998@tamriel.snowman.net>
 <18009.1638171451@antos>
 <Ye8uzspNw7DzUMnD@momjian.us>
 <1781.1643697906@antos>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1781.1643697906@antos>
Archived-At: <https://www.postgresql.org/message-id/Yfly9vkads7pipaW%40momjian.us>
Precedence: bulk

On Tue, Feb  1, 2022 at 07:45:06AM +0100, Antonin Houska wrote:
> > With pg_upgrade modified to preserve the relfilenode, tablespace oid, and
> > database oid, we are now closer to implementing cluster file encryption
> > using XTS.  I think we have a few steps left:
> > 
> > 1.  modify temporary file I/O to use a more centralized API
> > 2.  modify the existing cluster file encryption patch to use XTS with a
> >     IV that uses more than the LSN
> > 3.  add XTS regression test code like CTR
> > 4.  create WAL encryption code using CTR
> > 
> > If we can do #1 in PG 15 I think I can have #2 ready for PG 16 in July.
> > The feature wiki page is:
> > 
> > 	https://wiki.postgresql.org/wiki/Transparent_Data_Encryption
> > 
> > Do people want to advance this feature forward?
> 
> I confirm that we (Cybertec) do and that we're ready to spend more time on the
> community implementation.

Well, I sent an email a week ago asking if people want to advance this
feature forward, and so far you are the only person to reply, which I
think means there isn't enough interest in this feature to advance it.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  If only the physical world exists, free will is an illusion.