Skip to content

Commit

Permalink
Merge pull request #6030 from EnterpriseDB/TDE/openssl2
Browse files Browse the repository at this point in the history
TDE: specify AES implementation is done with OpenSSL
  • Loading branch information
gvasquezvargas authored Sep 10, 2024
2 parents 05ef6df + 7bd2713 commit 4e9c345
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion product_docs/docs/tde/15/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,9 @@ Data encryption and decryption is managed by the database and doesn't require ap

EDB Postgres Advanced Server and EDB Postgres Extended Server provide hooks to key management that's external to the database. These hooks allow for simple passphrase encrypt/decrypt or integration with enterprise key management solutions. See [Securing the data encryption key](./key_stores) for more information.

### How does TDE encrypt data?
### How does TDE encrypt data?

EDB TDE uses [OpenSSL](https://openssl-library.org/) to encrypt data files with the AES encryption algorithm. In Windows systems, TDE uses [OpenSSL 3](https://docs.openssl.org/3.0/). In Linux systems, TDE uses the OpenSSL version installed in the host operating system. To check the installed version, run `openssl version`. For more information, see the [OpenSSL documentation](https://docs.openssl.org/master/). If you're using a custom build not provided by the OpenSSL community, consult your vendor's documentation.

Starting with version 16, EDB TDE introduces the option to choose between AES-128 and AES-256 encryption algorithms during the initialization of the Postgres cluster. The choice between AES-128 and AES-256 hinges on balancing performance and security requirements. AES-128 is commonly advised for environments where performance efficiency and lower power consumption are pivotal, making it suitable for most applications. Conversely, AES-256 is recommended for scenarios demanding the highest level of security, often driven by regulatory mandates.

Expand Down

1 comment on commit 4e9c345

@github-actions
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please sign in to comment.