Re: WIP: Data at rest encryption

---- On Wed, 04 Sep 2019 00:56:15 +0800 Alvaro Herrera <mailto:alvherre(at)2ndquadrant(dot)com> wrote ----

On 2019-Aug-02, Shawn Wang wrote:

> Hi Antonin,

> It is very glad to see the new patch. I used the public patches a long time ago.

> I did some tests like the stream replication, much data running, temporary files encryption.

> I found that there is an issue in the src/backend/storage/file/encryption.c. You should put block_size = EVP_CIPHER_CTX_block_size(ctx); under the #ifdef USE_ASSERT_CHECKING.

> There is some problem to merge your patches to the latest kernel in the pg_ctl.c.

Is a new, fixed version going to be posted soon? It's been a while. 

Also, apologies if this has been asked before, but: how does this patch

relate to the stuff being discussed in

https://postgr.es/m/031401d3f41d$5c70ed90$1552c8b0$@lab.ntt.co.jp ?

Hi Álvaro,

Thank you for a reply.

I mainly said that the issues in the src/backend/storage/file/encryption.c. If somebody want to use these patches, I think Antonin need to fix it.

It does not relate to the stuff being discussed in TDE. As I know, some company use these patches to encrypt data, even if these issues don't matter.

Regards,

--

Shawn Wang