Toronto, Canada - May 19th, 2026
plpgsql_wrap is a PostgreSQL extension used to obfuscate PLPGSQL source code, making it unreadable to users while remaining fully executable by the PostgreSQL database. It is primarily used to protect intellectual property or sensitive business logic when delivering code to third parties. It is similar to the Oracle WRAP function and utility.
plpgsql_wrap v1.0 has been released, this is the first public release. It is compatible with PostgreSQL versions >= 12.
Write stored procedures with LANGUAGE plpgsql_wrap; source is validated, then AES-256-GCM encrypted directly into pg_proc.prosrc.
Users cannot look at store procedures plain text source code any more unless they know the encryption key.
pg_dump will not expose store procedures plain text source code too and the pg_dump output is directly restorable. Pre-wrapped blobs are accepted at CREATE time.
It is identical to LANGUAGE plpgsql, only the language name differs: plpgsql_wrap.
Example of use:
CREATE OR REPLACE FUNCTION public.calculate_bonus(emp_id int, yr int)
RETURNS numeric
LANGUAGE plpgsql_wrap
AS $$
DECLARE
v_salary numeric;
BEGIN
SELECT salary INTO v_salary FROM employees WHERE id = emp_id;
RETURN v_salary * 0.15; -- confidential formula
END;
$$;
-- Calling, permissions, overloading, results - all identical to plpgsql:
SELECT calculate_bonus(42, 2024);
In catalog table pg_proc the code is obfuscated:
SELECT substring(prosrc, 1, 50)||'...' AS wrapped_code
FROM pg_proc WHERE proname = 'calculate_bonus';
wrapped_code
-------------------------------------------------------
PLPGSQLWRAP:1:5752415001f5db365c6c185b66081ff0a23d...
(1 line)
This is also what will appears in the pg_dump output.
The plpgsql_wrap.unwrap_procedure() function is provided to recover the plain text source code using the encryption key. See detailed information by reading the documentation
plpgsql_wrap is an open project. Any contribution to build a better tool is welcome. You just have to send your ideas, features requests or patches using the GitHub tools.
Links :
The objective of this extension it to provide a feature to obfuscate plpgsql source code. It is primarily used to protect intellectual property or sensitive business logic when delivering code.
This is a project created and maintained by Gilles Darold at HexaCluster Corp.