Re: PG and database encryption

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: rakeshkumar464 <rakeshkumar464(at)outlook(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: PG and database encryption
Date: 2017-08-22 19:55:39
Message-ID: bf662542-72a1-363f-a7fc-e0f3321f282f@commandprompt.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 08/22/2017 12:48 PM, rakeshkumar464 wrote:
> We have a requirement to encrypt the entire database. What is the best tool
> to accomplish this. Our primary goal is that it should be transparent to the
> application, with no change in the application, as compared to un-encrypted
> database. Reading about pgcrypto module, it seems it is good for few columns
> only and using it to encrypt entire database is not a good use-case.
>
> Is this which can be done best by file level encryption? What are the good
> tools on Linux (RHES), preferably open-source.

If you are encrypting the entire database, use the filesystem.

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-Security_Guide-Encryption.html

Thanks!

JD

--
Command Prompt, Inc. || http://the.postgres.company/ || @cmdpromptinc

PostgreSQL Centered full stack support, consulting and development.
Advocate: @amplifypostgres || Learn: https://pgconf.us
***** Unless otherwise stated, opinions are my own. *****

In response to

Browse pgsql-general by date

  From Date Subject
Next Message John McKown 2017-08-22 20:08:29 Re: PG and database encryption
Previous Message rakeshkumar464 2017-08-22 19:48:13 PG and database encryption