Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1g9XWm-00079Y-Oj for pgsql-general@arkaria.postgresql.org; Mon, 08 Oct 2018 15:33:00 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1g9XWk-0005Ju-FV for pgsql-general@arkaria.postgresql.org; Mon, 08 Oct 2018 15:32:58 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1g9XWk-0005Jn-4M for pgsql-general@lists.postgresql.org; Mon, 08 Oct 2018 15:32:58 +0000 Received: from mtagated.edf.fr ([163.114.21.130]) by makus.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1g9XWc-0001aD-4Z for pgsql-general@lists.postgresql.org; Mon, 08 Oct 2018 15:32:56 +0000 From: ROS Didier To: "jpa@argudo.org" , "pgsql-general@lists.postgresql.org" Subject: RE: Why the index is not used ? Thread-Topic: Why the index is not used ? Thread-Index: AdRdWvsLq5pbGc6hRyec/3F+ZHcFNP//4vmA//5l9yCAA4zAgP//vN6QgABwqID//v5bQAA9pTcA//9t4EA= Date: Mon, 8 Oct 2018 15:32:45 +0000 Message-ID: <70ddc5c34d0640a6a7eb53186a7dfded@PCYINTPEXMU001.NEOPROD.EDF.FR> References: <74090066a33740ea8fc442cc70f8afa2@PCYINTPEXMU001.NEOPROD.EDF.FR> <3a14f7f8fbda4e868b663b31e8c5fa16@PCYINTPEXMU001.NEOPROD.EDF.FR> <064a89d526c44d45ae43a37556c6b5f1@USFKL11XG20CN01.mercer.com> <3566caf6e5e20665c48b2b9b9e61df57e21fd83b.camel@argudo.org> In-Reply-To: <3566caf6e5e20665c48b2b9b9e61df57e21fd83b.camel@argudo.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.22.153.70] x_exchange_neo: 1 Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Dear Jean-Paul Thank you very much for this link which is actually very interesting. I am= going to study it carefully. But my problem is more generic: = How to set up the encryption of sensitive data and have good performance (= using an index by example) ?. = Apparently it is not obvious as that. Best Regards Didier ROS -----Message d'origine----- De=A0: jpa@argudo.org [mailto:jpa@argudo.org] = Envoy=E9=A0: lundi 8 octobre 2018 10:44 =C0=A0: pgsql-general@lists.postgresql.org Objet=A0: Re: Why the index is not used ? Dear Didier, Le lundi 08 octobre 2018 =E0 08:32 +0000, ROS Didier a =E9crit : > Hi Virendra = > You think that outside encryption of the database is the best solution ? > How do you manage the encryption key ? > Can you give me some examples of this kind of solution. > Best Regards > Didier ROS If I understand your need well, you need to store credit card information i= nto your database. This is ruled by the Payment Card Industry Data Security Standard (aka PCI = DSS). I attend some years ago a real good presentation from Denish Patel, a well = known community member. I saw this talk in pgconf 2015 in Moscow: https://pgconf.ru/media2015c/pate= l.pdf I recommend you read it, if you had not already? It shows code examples, et= c. My 2 cents... -- = Jean-Paul Argudo Ce message et toutes les pi=E8ces jointes (ci-apr=E8s le 'Message') sont = =E9tablis =E0 l'intention exclusive des destinataires et les informations q= ui y figurent sont strictement confidentielles. Toute utilisation de ce Mes= sage non conforme =E0 sa destination, toute diffusion ou toute publication = totale ou partielle, est interdite sauf autorisation expresse. Si vous n'=EAtes pas le destinataire de ce Message, il vous est interdit de= le copier, de le faire suivre, de le divulguer ou d'en utiliser tout ou pa= rtie. Si vous avez re=E7u ce Message par erreur, merci de le supprimer de v= otre syst=E8me, ainsi que toutes ses copies, et de n'en garder aucune trace= sur quelque support que ce soit. Nous vous remercions =E9galement d'en ave= rtir imm=E9diatement l'exp=E9diteur par retour du message. Il est impossible de garantir que les communications par messagerie =E9lect= ronique arrivent en temps utile, sont s=E9curis=E9es ou d=E9nu=E9es de tout= e erreur ou virus. ____________________________________________________ This message and any attachments (the 'Message') are intended solely for th= e addressees. The information contained in this Message is confidential. An= y use of information contained in this Message not in accord with its purpo= se, any dissemination or disclosure, either whole or partial, is prohibited= except formal approval. If you are not the addressee, you may not copy, forward, disclose or use an= y part of it. If you have received this message in error, please delete it = and all copies from your system and notify the sender immediately by return= message. E-mail communication cannot be guaranteed to be timely secure, error or vir= us-free.