Re: Transparent Data Encryption in PostgreSQL?

On Thu, Jan 28, 2021 at 01:28:04PM +0000, Martin Goodson wrote:
> Hello.
>
> Got a bit of a weird question here : what is the state of transparent data
> encryption in PostgreSQL? I was under the impression it was on the 'to do'
> list for PostgreSQL 14 ...
>
> https://www.postgresql.org/about/press/faq/
>
> Q: What features will 14 have?
> A: As always, we can't be certain what will go in and what won't; the
> project has strict quality standards that not all patches can make before
> deadline. All we can tell you is what's currently being worked on, which
> includes significant performance improvements due to optimizations in
> connection handling, continued work on the pluggable storage interface
> (including plugins such as zheap or zedstore), native TRANSPARENT DATA
> ENCRYPTION support, continued improvements to parallelism and partitioning,
> and many more features. By the time 14 is released, though, this list may
> have changed considerably.
>
>
> ... but a colleague at work is adamant that PostgreSQL has had TDE since
> 2019.
>
> Have I missed a memo somewhere?

It has been worked on since before 2019. I worked on the key management
part recently, but there was no consensus in the community, so I have
stopped working on this feature, and I don't know anyone else who is
currently working on it:

https://www.postgresql.org/message-id/20210126225301.GD32305%40momjian.us

--
Bruce Momjian <bruce(at)momjian(dot)us> https://momjian.us
EDB https://enterprisedb.com

The usefulness of a cup is in its emptiness, Bruce Lee