Encrypt columns data in postgresql database with pgcrypto

Question

I have a postgres database with some tables having columns containing some sensitive data, i used PGCRYPTO extension (pgp_pub_encrypt/pgp_pub_decrypt) to encrypt and gpg to generate public and private key pairs.

I have two questions :

Where should i store this pair of keys knowing that i should use the same generated private key to decrypt a column ( i tried putting it in postgresql.conf file and that's not working)
Can we generate key pairs for each session to make the system more secure?

Laurenz Albe · Accepted Answer · 2020-09-29 11:07:25Z

2

The public key can be stored anywhere. You could store it in the database.

The private key belongs to your application. It should be stored on the application server, so that the application can supply it to decrypt the data in the database.

answered Sep 29, 2020 at 11:07

Laurenz Albe

257k22 gold badges312 silver badges388 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

gat kipper Over a year ago

Thank's for your answer but i'm wondering how to store KEK and DEK keys and how to make a transparent data encryption alike solution to modify keys through time

Collectives™ on Stack Overflow

Encrypt columns data in postgresql database with pgcrypto

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related