Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l57LK-00016u-MM for pgsql-novice@arkaria.postgresql.org; Thu, 28 Jan 2021 13:28:14 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l57LH-00059E-G0 for pgsql-novice@arkaria.postgresql.org; Thu, 28 Jan 2021 13:28:11 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l57LH-00058w-71 for pgsql-novice@lists.postgresql.org; Thu, 28 Jan 2021 13:28:11 +0000 Received: from mail-wr1-x431.google.com ([2a00:1450:4864:20::431]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1l57LE-0002g4-7v for pgsql-novice@lists.postgresql.org; Thu, 28 Jan 2021 13:28:10 +0000 Received: by mail-wr1-x431.google.com with SMTP id 7so5420057wrz.0 for ; Thu, 28 Jan 2021 05:28:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=VSt88pHi0RK1B/T0KcuoxuQaXKKQKgquoc6OhSPcudc=; b=k+YCyou6k3yHZcXSQJh6STXyAli8SIOtNKLh4aVk9vkYlweHYKbO0ZiOFUVp6WHQLJ jJSZ9vQ0IkKOEyFxYxULjiYVRO7QJfgXLAt3J6cP1t/K+AXW8JzNZ7iD2GTZlHCBrCeN EB1M+OhcIeI2naMiiM/uvKP5+FfOqdPQhZ5wJnEL25BtgoBDOFT0tVQzXIkBfRagRXz6 w+1AwIgYGkXGhdxPEtfLSTudBwJWKjq7E36Vxy+zWxoalC0Dd7C2ADwKkP0cg82FJ3Ix M3O0vOTXuBVsncjb8+Fkdpt8Wjt23yZPHJfWKm9OkPmPIkqw7LOOrrv0Qa34SxqdJQWZ HI+g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=VSt88pHi0RK1B/T0KcuoxuQaXKKQKgquoc6OhSPcudc=; b=Fl3PiMzEb1yH17/oP7nspa7IfaL4ctRKj7sv1mEe8pLqKLlf6J22LJK4Ia4RuInA05 eMXrd+f7U2S+1QZqVD5OxDGfukpdNZC/KFg1o9y48Z6HcgFrfXI765A7k1+UufsYLawy nz+4sH46suBq1DWiTSjIsEG/XQJOZWJ1vTFRkreetZtr+0TAISnw3MYyWv6mMgfMNDF1 1L18zIzWhaZ9kO4OydfzqD9UtKAEtOubgIbwX8UJFaAfBS7HVx2kxDCf8GUBWL440GO3 zowwDz9Xn61PkWn5xL/wyWRRxzP9/PGJaK8wQT9m18TSs57WYAKVFQqMfaVFGNboXVnp 5wpw== X-Gm-Message-State: AOAM5319YUBJdXyyXp8aQolJc/BDtMbIyc7DBAyE5UE7JlcrjXXmqQ6G /iJetYQSWILo74v4eSyB3qd2T52s2puF X-Google-Smtp-Source: ABdhPJwLzD7jXOvA9iXc6RmqlcOd4V8Mj04CcN2WODjvPIFll3mRPo8UAN3IHnwTO/qhTKZuX092Vw== X-Received: by 2002:a5d:4d8b:: with SMTP id b11mr16396640wru.215.1611840486221; Thu, 28 Jan 2021 05:28:06 -0800 (PST) Received: from Martins-MacBook-Pro.local (host5-81-77-110.range5-81.btcentralplus.com. [5.81.77.110]) by smtp.googlemail.com with ESMTPSA id d9sm7102291wrq.74.2021.01.28.05.28.05 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 28 Jan 2021 05:28:05 -0800 (PST) To: "pgsql-novice@lists.postgresql.org" From: Martin Goodson Subject: Transparent Data Encryption in PostgreSQL? Message-ID: Date: Thu, 28 Jan 2021 13:28:04 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Thunderbird/78.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Hello. Got a bit of a weird question here : what is the state of transparent data encryption in PostgreSQL? I was under the impression it was on the 'to do' list for PostgreSQL 14 ... https://www.postgresql.org/about/press/faq/ Q: What features will 14 have? A: As always, we can't be certain what will go in and what won't; the project has strict quality standards that not all patches can make before deadline. All we can tell you is what's currently being worked on, which includes significant performance improvements due to optimizations in connection handling, continued work on the pluggable storage interface (including plugins such as zheap or zedstore), native TRANSPARENT DATA ENCRYPTION support, continued improvements to parallelism and partitioning, and many more features. By the time 14 is released, though, this list may have changed considerably. ... but a colleague at work is adamant that PostgreSQL has had TDE since 2019. Have I missed a memo somewhere? Many thanks! -- Martin Goodson Whatever you've got planned, forget it. I'm the Doctor. I'm 904 years old. I'm from the planet Gallifrey in the constellation of Kasterborous. I am The Oncoming Storm, the Bringer of Darkness and you are ... basically just a rabbit, aren't you? OK, carry on, just a general ... warning.