Re: pgcrypto encrypt

From: Jeff Janes <jeff(dot)janes(at)gmail(dot)com>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: Stephen Cook <sclists(at)gmail(dot)com>, PostgreSQL - general <pgsql-general(at)postgresql(dot)org>
Subject: Re: pgcrypto encrypt
Date: 2017-09-19 19:42:40
Message-ID: CAMkU=1wX4-rXWqPM+naQ+OV=W+gLETMGLW8q_6KF6tCYx5+4Ag@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Tue, Sep 19, 2017 at 12:20 PM, Bruce Momjian <bruce(at)momjian(dot)us> wrote:

> On Wed, Sep 6, 2017 at 04:19:52PM -0400, Stephen Cook wrote:
> > Hello!
> >
> > Is there a way to decrypt data encrypted with the pgcrypto "encrypt"
> > function, outside the database? Assuming that I know the key etc...
>
> Yes, I think so. pgcrypto uses openssl and gpg internally, so using
> those tools should work.
>

I know that pgp_sym_encrypt and pgp_sym_decrypt interoperates well with
"outside the database" gpg, although dealing with armoring and de-armoring
as well as text mode or binary mode is a bit of a bother until you get used
to it.

But he seems to be asking about the "F.25.4. Raw Encryption Functions". I
wouldn't want to reassure him that it would be easy to make those work
outside the database, without having seen it done. But it should of course
be possible to make it work, even if that means rearranging the code of
pgcrypto and compiling into something that is standalone.

Cheers,

Jeff

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message John R Pierce 2017-09-19 19:45:34 Re: [HACKERS] USER Profiles for PostgreSQL
Previous Message chiru r 2017-09-19 19:33:01 Re: [GENERAL] USER Profiles for PostgreSQL