Re: pgcrypto - real life examples to encrypt / decrypt

From: Vikas Sharma <shavikas(at)gmail(dot)com>
To: Luca Ferrari <fluca1978(at)gmail(dot)com>
Cc: pgsql-general <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: pgcrypto - real life examples to encrypt / decrypt
Date: 2021-08-03 11:03:02
Message-ID: CAN6gwKzXYT9k1rGs4zUFVkYUaqGSg-EgNouqfX3f3zNf1zqMLQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Thank you Luca,

For now I have seen the below:

pgp_pub_encrypt -- using public gpg key
pgp_pub_decrypt -- using secret gpg key

Select crypt('test', gen_salt('md5'));

Select PGP_SYM_DECRYPT(PGP_SYM_ENCRYPT('Some data','Secret
password','compress-algo=1, cipher-algo=aes256'),'Secret password');

My question is, can I use the gpg public/secret key instead of the 'Secret
password' in above PGP_Sym_encrypt/decrypt? I can create a wrapper
function to read the public/secret keys to hide it from appearing as clear
text.

still researching how to encrypt a column with sensitive data as a best
practice to use in OLTP production with minimal impact on performance.

Regards
Vikas S

On Tue, 3 Aug 2021 at 11:03, Luca Ferrari <fluca1978(at)gmail(dot)com> wrote:

> On Mon, Aug 2, 2021 at 11:14 PM Vikas Sharma <shavikas(at)gmail(dot)com> wrote:
> >
> > Dear Experts,
> >
> > Could you please share some real life examples of using pgcrypto in
> production?
> >
> > I am planning to use it in our environment and wondering what could be
> the best practice for its use.
>
> It is not clear what you are going to do and which kind of encryption
> you are going to use.
> For a symmetric encryption this could be a starting point:
>
> UPDATE secret
> SET secret_text = pgp_sym_encrypt( clear_text,
>
> 'A-Strong-Secret-Password' );
>
> I do remember there was an extension made to overtake pgcrypto, but
> currently I don't remember the name.
>
> Luca
>

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Gilar Ginanjar 2021-08-03 11:16:34 Re: Unexpected block ID found when reading data
Previous Message Luca Ferrari 2021-08-03 10:06:05 Re: Unexpected block ID found when reading data