open_pg_tde documentation¶
open_pg_tde is an open source PostgreSQL extension that provides Transparent Data Encryption (TDE) to protect data at rest. It ensures that the data stored on disk is encrypted, and that no one can read it without the proper encryption keys, even if they gain access to the physical storage media.
open_pg_tde is an open fork of Percona’s pg_tde, maintained by Command Prompt, Inc. It runs on upstream PostgreSQL 16 and later: you apply the open_pg_tde core patch to a PostgreSQL source tree, build it with the hooks enabled, and build the extension against that install. See Install from source.
Installation guide¶
Get started quickly with the step-by-step installation instructions.
Features¶
Explore what features the open_pg_tde extension brings to PostgreSQL.
Architecture¶
Understand how open_pg_tde integrates into PostgreSQL. Learn how keys are managed, how encryption is applied, and how the design ensures performance and security.
What’s new?¶
Learn about the releases and changes in open_pg_tde.