public inbox for [email protected]
help / color / mirror / Atom feedTransparent Data Encryption in PostgreSQL?
6+ messages / 3 participants
[nested] [flat]
* Transparent Data Encryption in PostgreSQL?
@ 2021-01-28 13:28 Martin Goodson <[email protected]>
2021-01-28 14:50 ` Re: Transparent Data Encryption in PostgreSQL? Bruce Momjian <[email protected]>
2021-01-28 15:17 ` Re: Transparent Data Encryption in PostgreSQL? Tom Lane <[email protected]>
0 siblings, 2 replies; 6+ messages in thread
From: Martin Goodson @ 2021-01-28 13:28 UTC (permalink / raw)
To: [email protected] <[email protected]>
Hello.
Got a bit of a weird question here : what is the state of transparent
data encryption in PostgreSQL? I was under the impression it was on the
'to do' list for PostgreSQL 14 ...
https://www.postgresql.org/about/press/faq/
Q: What features will 14 have?
A: As always, we can't be certain what will go in and what won't; the
project has strict quality standards that not all patches can make
before deadline. All we can tell you is what's currently being worked
on, which includes significant performance improvements due to
optimizations in connection handling, continued work on the pluggable
storage interface (including plugins such as zheap or zedstore), native
TRANSPARENT DATA ENCRYPTION support, continued improvements to
parallelism and partitioning, and many more features. By the time 14 is
released, though, this list may have changed considerably.
... but a colleague at work is adamant that PostgreSQL has had TDE since
2019.
Have I missed a memo somewhere?
Many thanks!
--
Martin Goodson
Whatever you've got planned, forget it. I'm the Doctor.
I'm 904 years old. I'm from the planet Gallifrey in the
constellation of Kasterborous. I am The Oncoming Storm,
the Bringer of Darkness and you are ... basically just a
rabbit, aren't you? OK, carry on, just a general ...
warning.
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Transparent Data Encryption in PostgreSQL?
2021-01-28 13:28 Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
@ 2021-01-28 14:50 ` Bruce Momjian <[email protected]>
2021-01-28 15:23 ` Re: Transparent Data Encryption in PostgreSQL? Bruce Momjian <[email protected]>
2021-01-28 17:23 ` Re: Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
1 sibling, 2 replies; 6+ messages in thread
From: Bruce Momjian @ 2021-01-28 14:50 UTC (permalink / raw)
To: Martin Goodson <[email protected]>; +Cc: [email protected] <[email protected]>
On Thu, Jan 28, 2021 at 01:28:04PM +0000, Martin Goodson wrote:
> Hello.
>
> Got a bit of a weird question here : what is the state of transparent data
> encryption in PostgreSQL? I was under the impression it was on the 'to do'
> list for PostgreSQL 14 ...
>
> https://www.postgresql.org/about/press/faq/
>
> Q: What features will 14 have?
> A: As always, we can't be certain what will go in and what won't; the
> project has strict quality standards that not all patches can make before
> deadline. All we can tell you is what's currently being worked on, which
> includes significant performance improvements due to optimizations in
> connection handling, continued work on the pluggable storage interface
> (including plugins such as zheap or zedstore), native TRANSPARENT DATA
> ENCRYPTION support, continued improvements to parallelism and partitioning,
> and many more features. By the time 14 is released, though, this list may
> have changed considerably.
>
>
> ... but a colleague at work is adamant that PostgreSQL has had TDE since
> 2019.
>
> Have I missed a memo somewhere?
It has been worked on since before 2019. I worked on the key management
part recently, but there was no consensus in the community, so I have
stopped working on this feature, and I don't know anyone else who is
currently working on it:
https://www.postgresql.org/message-id/20210126225301.GD32305%40momjian.us
--
Bruce Momjian <[email protected]> https://momjian.us
EDB https://enterprisedb.com
The usefulness of a cup is in its emptiness, Bruce Lee
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Transparent Data Encryption in PostgreSQL?
2021-01-28 13:28 Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
2021-01-28 14:50 ` Re: Transparent Data Encryption in PostgreSQL? Bruce Momjian <[email protected]>
@ 2021-01-28 15:23 ` Bruce Momjian <[email protected]>
1 sibling, 0 replies; 6+ messages in thread
From: Bruce Momjian @ 2021-01-28 15:23 UTC (permalink / raw)
To: Martin Goodson <[email protected]>; +Cc: [email protected] <[email protected]>
On Thu, Jan 28, 2021 at 09:50:55AM -0500, Bruce Momjian wrote:
> On Thu, Jan 28, 2021 at 01:28:04PM +0000, Martin Goodson wrote:
> > ... but a colleague at work is adamant that PostgreSQL has had TDE since
> > 2019.
> >
> > Have I missed a memo somewhere?
>
> It has been worked on since before 2019. I worked on the key management
> part recently, but there was no consensus in the community, so I have
> stopped working on this feature, and I don't know anyone else who is
> currently working on it:
>
> https://www.postgresql.org/message-id/20210126225301.GD32305%40momjian.us
Oh, Cybertec has an open source version of Postgres 12.3 with TDE:
https://www.cybertec-postgresql.com/en/products/postgresql-transparent-data-encryption/
https://www.cybertec-postgresql.com/en/transparent-data-encryption-installation-guide/
and Postgres 12.3 was released on 2020-05-14, and their TDE version was
packaged on 2020-07-10, based on the tarball file dates. Their TDE
feature is not part of community Postgres, and I don't if that will ever
happen.
--
Bruce Momjian <[email protected]> https://momjian.us
EDB https://enterprisedb.com
The usefulness of a cup is in its emptiness, Bruce Lee
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Transparent Data Encryption in PostgreSQL?
2021-01-28 13:28 Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
2021-01-28 14:50 ` Re: Transparent Data Encryption in PostgreSQL? Bruce Momjian <[email protected]>
@ 2021-01-28 17:23 ` Martin Goodson <[email protected]>
1 sibling, 0 replies; 6+ messages in thread
From: Martin Goodson @ 2021-01-28 17:23 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: [email protected] <[email protected]>
On 28/01/2021 14:50, Bruce Momjian wrote:
> On Thu, Jan 28, 2021 at 01:28:04PM +0000, Martin Goodson wrote:
>> Hello.
>>
>> Got a bit of a weird question here : what is the state of transparent data
>> encryption in PostgreSQL? I was under the impression it was on the 'to do'
>> list for PostgreSQL 14 ...
>>
>> https://www.postgresql.org/about/press/faq/
>>
>> Q: What features will 14 have?
>> A: As always, we can't be certain what will go in and what won't; the
>> project has strict quality standards that not all patches can make before
>> deadline. All we can tell you is what's currently being worked on, which
>> includes significant performance improvements due to optimizations in
>> connection handling, continued work on the pluggable storage interface
>> (including plugins such as zheap or zedstore), native TRANSPARENT DATA
>> ENCRYPTION support, continued improvements to parallelism and partitioning,
>> and many more features. By the time 14 is released, though, this list may
>> have changed considerably.
>>
>>
>> ... but a colleague at work is adamant that PostgreSQL has had TDE since
>> 2019.
>>
>> Have I missed a memo somewhere?
>
> It has been worked on since before 2019. I worked on the key management
> part recently, but there was no consensus in the community, so I have
> stopped working on this feature, and I don't know anyone else who is
> currently working on it:
>
> https://www.postgresql.org/message-id/20210126225301.GD32305%40momjian.us
>
Thank you very much for the response, it answered my question perfectly.
Regards,
Martin.
--
Martin Goodson
Whatever you've got planned, forget it. I'm the Doctor.
I'm 904 years old. I'm from the planet Gallifrey in the
constellation of Kasterborous. I am The Oncoming Storm,
the Bringer of Darkness and you are ... basically just a
rabbit, aren't you? OK, carry on, just a general ...
warning.
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Transparent Data Encryption in PostgreSQL?
2021-01-28 13:28 Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
@ 2021-01-28 15:17 ` Tom Lane <[email protected]>
2021-01-28 15:32 ` Re: Transparent Data Encryption in PostgreSQL? Bruce Momjian <[email protected]>
1 sibling, 1 reply; 6+ messages in thread
From: Tom Lane @ 2021-01-28 15:17 UTC (permalink / raw)
To: Martin Goodson <[email protected]>; +Cc: [email protected] <[email protected]>
Martin Goodson <[email protected]> writes:
> ... but a colleague at work is adamant that PostgreSQL has had TDE since
> 2019.
There is at least one fork with TDE, which maybe is what your colleague is
thinking of, but it doesn't exist in the community code today. Various
people are interested in merging the feature. At this point I'd lay
odds against it being ready for v14, but perhaps it will happen for v15.
regards, tom lane
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Transparent Data Encryption in PostgreSQL?
2021-01-28 13:28 Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
2021-01-28 15:17 ` Re: Transparent Data Encryption in PostgreSQL? Tom Lane <[email protected]>
@ 2021-01-28 15:32 ` Bruce Momjian <[email protected]>
0 siblings, 0 replies; 6+ messages in thread
From: Bruce Momjian @ 2021-01-28 15:32 UTC (permalink / raw)
To: Tom Lane <[email protected]>; +Cc: Martin Goodson <[email protected]>; [email protected] <[email protected]>
On Thu, Jan 28, 2021 at 10:17:31AM -0500, Tom Lane wrote:
> Martin Goodson <[email protected]> writes:
> > ... but a colleague at work is adamant that PostgreSQL has had TDE since
> > 2019.
>
> There is at least one fork with TDE, which maybe is what your colleague is
> thinking of, but it doesn't exist in the community code today. Various
> people are interested in merging the feature. At this point I'd lay
> odds against it being ready for v14, but perhaps it will happen for v15.
Yeah, we could get the key management into PG 14, but it wouldn't do
anything, so it would have to be hidden so it didn't confuse people, so
what's the point of adding it now? Also, I don't know anyone who is
currently working on the data encryption stage, which is the next step.
--
Bruce Momjian <[email protected]> https://momjian.us
EDB https://enterprisedb.com
The usefulness of a cup is in its emptiness, Bruce Lee
^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2021-01-28 17:23 UTC | newest]
Thread overview: 6+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2021-01-28 13:28 Transparent Data Encryption in PostgreSQL? Martin Goodson <[email protected]>
2021-01-28 14:50 ` Bruce Momjian <[email protected]>
2021-01-28 15:23 ` Bruce Momjian <[email protected]>
2021-01-28 17:23 ` Martin Goodson <[email protected]>
2021-01-28 15:17 ` Tom Lane <[email protected]>
2021-01-28 15:32 ` Bruce Momjian <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox