Where do you store key for encryption

From: "Naoko Reeves" <naoko(at)lawlogix(dot)com>
To: <pgsql-general(at)postgresql(dot)org>
Subject: Where do you store key for encryption
Date: 2009-11-18 03:12:31
Message-ID: 076DC33A3D38CE4BBC64D35DDD9DE70C098DA730@mse4be2.mse4.exchange.ms
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi,

We have web application and encrypt PII columns. We use encrypt/decrypt
function for this.

Currently we hard coded the key in postgresql function which I am not
sure of it.

I did google it and people suggest that it needed to be stored in
physically isolated location (storing decryption key on the same server
as the data is kind of like writing your PIN on your ATM card).

I would like to know how postgres professionals handles this.

Thank you very much for your time in advance.

Naoko

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2009-11-18 03:15:44 Re: Error when creating table with boolean data type
Previous Message Scott Marlowe 2009-11-18 02:07:47 Re: Data Directory size increasing abnormally