Re: Threat models for DB cryptography (Re: [Proposal] Table-level Transparent Data Encryption (TDE) and Key) Management Service (KMS)

2018-07-03 Thread Nico Williams
On Tue, Jul 03, 2018 at 07:28:42PM +0900, Masahiko Sawada wrote: > On Tue, Jul 3, 2018 at 7:16 AM, Nico Williams wrote: > > Yes, but piecemeal encryption seems like a bad idea to me. > > What do you mean by "piecemeal encryption"? Is it not-whole database > encryption such as per-table or

Re: Threat models for DB cryptography (Re: [Proposal] Table-level Transparent Data Encryption (TDE) and Key) Management Service (KMS)

2018-07-03 Thread Masahiko Sawada
On Tue, Jul 3, 2018 at 7:16 AM, Nico Williams wrote: > On Mon, Jul 02, 2018 at 06:22:46PM +0900, Masahiko Sawada wrote: >> On Fri, Jun 22, 2018 at 2:31 PM, Tsunakawa, Takayuki >> wrote: >> > From: Nico Williams [mailto:n...@cryptonector.com] >> > >> >> One shortcoming of relying on OS

Re: Threat models for DB cryptography (Re: [Proposal] Table-level Transparent Data Encryption (TDE) and Key) Management Service (KMS)

2018-07-02 Thread Nico Williams
On Mon, Jul 02, 2018 at 06:22:46PM +0900, Masahiko Sawada wrote: > On Fri, Jun 22, 2018 at 2:31 PM, Tsunakawa, Takayuki > wrote: > > From: Nico Williams [mailto:n...@cryptonector.com] > > > >> One shortcoming of relying on OS functionality for protection against > >> malicious storage is that not

Re: Threat models for DB cryptography (Re: [Proposal] Table-level Transparent Data Encryption (TDE) and Key) Management Service (KMS)

2018-07-02 Thread Masahiko Sawada
On Fri, Jun 22, 2018 at 2:31 PM, Tsunakawa, Takayuki wrote: > From: Nico Williams [mailto:n...@cryptonector.com] >> Let's start with a set of threat models then. I'll go first: > > Thank you so much for summarizing the current situation. I'd appreciate it > if you could write this on the

Re: Threat models for DB cryptography (Re: [Proposal] Table-level Transparent Data Encryption (TDE) and Key) Management Service (KMS)

2018-06-22 Thread Nico Williams
On Fri, Jun 22, 2018 at 05:31:44AM +, Tsunakawa, Takayuki wrote: > From: Nico Williams [mailto:n...@cryptonector.com] > > Let's start with a set of threat models then. I'll go first: > > Thank you so much for summarizing the current situation. I'd > appreciate it if you could write this on

RE: Threat models for DB cryptography (Re: [Proposal] Table-level Transparent Data Encryption (TDE) and Key) Management Service (KMS)

2018-06-21 Thread Tsunakawa, Takayuki
From: Nico Williams [mailto:n...@cryptonector.com] > Let's start with a set of threat models then. I'll go first: Thank you so much for summarizing the current situation. I'd appreciate it if you could write this on the PostgreSQL wiki, when the discussion has settled somehow. > - local