DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=date:from:to:cc:subject:message-id:references:mime-version
	:content-type:content-disposition:in-reply-to:user-agent;
	b=heHhg0v6PzCbU9nLMGwPAS/FMIFApMFTmy9DwTEhNvdvMv5gL8HxBgGf1kGveXqgwX
	xk6fOeasJtXmYgunRmO9SdKK6zmG33tTima/tLBsmJH7Q63K6mLgVxyQ4x8DBpk6PPP6
	2gpXbskzIis91JbsT7qQ3B/QMDBU42laBiw04=
Date: Fri, 14 Aug 2009 16:28:20 -0600
From: Joshua Tolley <eggyknap@gmail.com>
To: Hengky Lie <hengkyliwandouw@gmail.com>
Cc: pgsql-sql@postgresql.org
Subject: Re: Field or record level encryption / decryption
Message-ID: <20090814222820.GC3940@eddie>
References: <697B993A-8A8A-4271-AE98-B7BB4D192608@gmail.com>
	<8763cqqv4c.fsf@dba2.int.libertyrms.com>
	<B0DCC3D1-A4B7-48B3-B0BD-B38333A56CC0@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="f+W+jCU1fRNres8c"
Content-Disposition: inline
In-Reply-To: <B0DCC3D1-A4B7-48B3-B0BD-B38333A56CC0@gmail.com>
User-Agent: Mutt/1.5.18 (2008-05-17)


--f+W+jCU1fRNres8c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 15, 2009 at 12:07:54AM +0800, Hengky Lie wrote:
> Thanks to all who response my question.
>
> I have checked the doc, but it seems too advance for my postgresql =20
> knowledge.
>
> Other question is where can i get pgcrypto modules ?

You haven't told us how you installed PostgreSQL, but you probably did it w=
ith
some operating system package. In that case, there's most likely a
postgresql-contrib package (or some other similarly named package) you can
install that will include pgcrypto. Within that package there should be some
SQL file full of "CREATE FUNCTION" statements, which you need to run in each
database where you'd like to use pgcrypto.

> For simple record encryption that contains date field, varchar, integer=
=20
> and text, what encryption i can use ? As far as i know, there is no way=
=20
> to return MD5 result back to its original value. Is this true or not ?

That's a bit beyond the scope of this mailing lists. Different methods and
algorithms have different attributes, benfits, and drawbacks. I'd recommend
studying the subject if you're trying to protect anything seriously. As to
MD5, you're correct that the idea is you can't recreate the original value
without an awful lot of computing time. But again, study the field before
trying to do something serious. It's complex, and easy to get wrong.

- Josh / eggyknap


--f+W+jCU1fRNres8c
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqF5QQACgkQRiRfCGf1UMP5XwCffGY5COBWu6ZNZ+qPMZYzfe86
jNgAn0nXeeCfYVSwyi0biMIUI0BZzP5k
=6FQ1
-----END PGP SIGNATURE-----

--f+W+jCU1fRNres8c--