Re: [PoC] run SQL over ciphertext

2023-10-11 Thread Mingyu Li
Hello Peter, > https://www.postgresql.org/message-id/flat/89157929-c2b6-817b-6025-8e4b2d89d...@enterprisedb.com Thanks for referring me to your TCE project, nice work! It takes time to go through the long thread of discussion and the patch. A quick question: what operations do pg_encrypted_*

Re: [PoC] run SQL over ciphertext

2023-10-11 Thread Mingyu Li
Hi, > the idea is to split users into 'client users' who can see data unencrypted, and 'server users', who are administrators unable to decrypt data. Exactly! > how are secrets managed? Do you use a sort of vault to keep encryption keys? Good question. The client holds the key and uses a proxy

Re: [PoC] run SQL over ciphertext

2023-10-11 Thread Peter Eisentraut
On 10.10.23 08:42, Mingyu Li wrote: We have developed an extension, allowing PostgreSQL to run queries over encrypted data. This functionality is achieved via user-defined functions that extend encrypted data types and support commonly used expression operations. Our tests validated its

Re: [PoC] run SQL over ciphertext

2023-10-10 Thread Giampaolo Capelli
Hello, I think this is a very interesting topic, especially for European companies where data sovereignty in the cloud has become critical. If I understand correctly, the idea is to split users into 'client users' who can see data unencrypted, and 'server users', who are administrators unable to

[PoC] run SQL over ciphertext

2023-10-10 Thread Mingyu Li
Hi all, We have developed an extension, allowing PostgreSQL to run queries over encrypted data. This functionality is achieved via user-defined functions that extend encrypted data types and support commonly used expression operations. Our tests validated its effectiveness with TPC-C and TPC-H