Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

pg_vault_tde v1.7.1 : Transparent Data Encryption for PostgreSQL 17 and 18

Дата публикации: 10-09-2026 00:00:00


pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decrypts it after it leaves, so applications require no changes.
Keys are held outside the database: HashiCorp Vault or OpenBao through the Transit engine, a PKCS#11 token or HSM, or a local PKCS#12 wallet. Data encryption keys are per table and can be rotated online. Requirements are PostgreSQL 17 or 18, OpenSSL 3.x, and the library listed in shared_preload_libraries.
The current release is 1.7.1. It corrects the AAD derivation for out-of-line TOAST values, with the consequence that TOAST data written by 1.7.0 or earlier does not authenticate under 1.7.1: affected tables must be exported before the new binary is installed. The procedure is documented in the README.
pg_vault_tde is released under the PostgreSQL licence. Sources, documentation and binary .deb and .rpm packages are on GitHub; the distribution is on PGXN.


Основное содержимое страницы с новостью.

Posted on 2026-09-10 by Miriade Srl

Related Open Source

pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decrypts it after it leaves, so applications require no changes.

Keys are held outside the database: HashiCorp Vault or OpenBao through the Transit engine, a PKCS#11 token or HSM, or a local PKCS#12 wallet. Data encryption keys are per table and can be rotated online. Requirements are PostgreSQL 17 or 18, OpenSSL 3.x, and the library listed in shared_preload_libraries.

The current release is 1.7.1. It corrects the AAD derivation for out-of-line TOAST values, with the consequence that TOAST data written by 1.7.0 or earlier does not authenticate under 1.7.1: affected tables must be exported before the new binary is installed. The procedure is documented in the README.

pg_vault_tde is released under the PostgreSQL licence. Sources, documentation and binary .deb and .rpm packages are on GitHub; the distribution is on PGXN.

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1Running pgBackRest with pg_tde: A Practical Percona Walkthrough08.6610-03-2026
2TDE performance in PostgreSQL05.9820-07-2026
3pgAdmin 4 v9.18 Released 010.2217-09-2026
4Say Hello to OIDC in PostgreSQL 18!07.8922-10-2025
5PostgreSQL 19 Beta 4 Released! 08.5824-09-2026
6PostgreSQL Migrator 1.0 : first stable release 010.4210-09-2026
7pgsql-test: Real Postgres Testing for Faster Development Loops 07.4722-09-2026
8PostgresCompare 2.2.0 Released 01222-09-2026
9PGX announces support for EOL versions of PostgreSQL 011.225-06-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 9. Тональность: 0. Информативность: 10.71. Источник: www.postgresql.org.