{"repo":"vibhorkum/column_encrypt","free":true,"listed":false,"github":"https://github.com/vibhorkum/column_encrypt","clone":"git clone https://github.com/vibhorkum/column_encrypt.git","description":"PostgreSQL extension for transparent column-level encryption using AES, with custom encrypted data types (encrypted_text, encrypted_bytea) and a two-tier key management model (KEK/DEK).","language":"PLpgSQL","stars":21,"topics":["aes","column-level-encryption","data-security","encryption","key-management","plpgsql","postgres-extension","postgresql","transparent-encryption"],"license":"PostgreSQL","category":"security-tools","readme_excerpt":"column encrypt Table of Contents - Overview - Features - Requirements - Architecture - Installation - Docker Regression Testing - Configuration - Usage - Functions Reference - GUC Parameters - Security Model - Key Rotation - Supported Algorithms - License --- Overview column encrypt is a PostgreSQL extension that provides transparent column-level encryption . It allows database users to use their own keys when inserting data into a table so that data is stored encrypted in designated columns. Users who hold the correct key can read and write encrypted columns without any modification to their SQL queries — encryption and decryption happen transparently at the type input/output level. --- Features - Two custom encrypted data types: ENCRYPTED TEXT and ENCRYPTED BYTEA - Two-tier key model : Key Encryption Key (KEK) wraps the Data Encryption Key (DEK), so the DEK is never stored in plaintext - AES encryption via the pgcrypto extension - Key version header embedded in every ciphertext for future key rotation tracking - Version-aware decryption using the ciphertext header and session-loaded keys - Single-role security model with unified column encrypt user role - Automatic log masking for sensitive key operations (defense-in-depth) - Key registry metadata with explicit pending , active , retired , and revoked states - Key rotation support with both full-table and batched re-encryption helpers - Optional blind-index helpers for scalable equality lookup patterns - Hash/equality seman","default_branch":null,"files":null,"tree":[],"storefront":"/r/vibhorkum","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/vibhorkum/column_encrypt/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}