pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decrypts it after it leaves, so applications require no changes.
Keys are held outside the database: HashiCorp Vault or OpenBao through the Transit engine, a PKCS#11 token or HSM, or a local PKCS#12 wallet. Data encryption keys are per table and can be rotated online. Requirements are PostgreSQL 17 or 18, OpenSSL 3.x, and the library listed in shared_preload_libraries.
The current release is 1.7.1. It corrects the AAD derivation for out-of-line TOAST values, with the consequence that TOAST data written by 1.7.0 or earlier does not authenticate under 1.7.1: affected tables must be exported before the new binary is installed. The procedure is documented in the README.
pg_vault_tde is released under the PostgreSQL licence. Sources, documentation and binary .deb and .rpm packages are on GitHub; the distribution is on PGXN.
Posted on 2026-09-10 by Miriade Srl
Related Open Source
pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decrypts it after it leaves, so applications require no changes.
Keys are held outside the database: HashiCorp Vault or OpenBao through the Transit engine, a PKCS#11 token or HSM, or a local PKCS#12 wallet. Data encryption keys are per table and can be rotated online. Requirements are PostgreSQL 17 or 18, OpenSSL 3.x, and the library listed in shared_preload_libraries.
The current release is 1.7.1. It corrects the AAD derivation for out-of-line TOAST values, with the consequence that TOAST data written by 1.7.0 or earlier does not authenticate under 1.7.1: affected tables must be exported before the new binary is installed. The procedure is documented in the README.
pg_vault_tde is released under the PostgreSQL licence. Sources, documentation and binary .deb and .rpm packages are on GitHub; the distribution is on PGXN.
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | Running pgBackRest with pg_tde: A Practical Percona Walkthrough | 0 | 8.66 | 10-03-2026 |
| 2 | TDE performance in PostgreSQL | 0 | 5.98 | 20-07-2026 |
| 3 | pgAdmin 4 v9.18 Released | 0 | 10.22 | 17-09-2026 |
| 4 | Say Hello to OIDC in PostgreSQL 18! | 0 | 7.89 | 22-10-2025 |
| 5 | PostgreSQL 19 Beta 4 Released! | 0 | 8.58 | 24-09-2026 |
| 6 | PostgreSQL Migrator 1.0 : first stable release | 0 | 10.42 | 10-09-2026 |
| 7 | pgsql-test: Real Postgres Testing for Faster Development Loops | 0 | 7.47 | 22-09-2026 |
| 8 | PostgresCompare 2.2.0 Released | 0 | 12 | 22-09-2026 |
| 9 | PGX announces support for EOL versions of PostgreSQL | 0 | 11.2 | 25-06-2026 |