{
   "name": "pg_vault_tde",
   "abstract": "Transparent Data Encryption (TDE) for PostgreSQL via a custom Table Access Method",
   "description": "pg_vault_tde encrypts every tuple with AES-256-GCM at the Table Access Method layer (encrypted_heap), transparently to applications: data is encrypted before it reaches the storage manager and decrypted after it leaves. An optional encrypted B-Tree index access method (tde_btree, AES-256-SIV) supports equality lookups on encrypted columns without exposing plaintext key values. Encryption keys are managed by HashiCorp Vault / OpenBao, a PKCS#11 / HSM token, or a local PKCS#12 wallet, and are cached in shared memory with support for online rotation.",
   "version": "1.7.0",
   "date": "2026-08-06T12:46:39Z",
   "maintainer": [
      "Miriade S.r.l. <supportodb@miriade.it>"
   ],
   "release_status": "stable",
   "user": "mdurighetto",
   "sha1": "fc9ab665872ff62452e58300c1efe2dccd57f670",
   "license": "postgresql",
   "prereqs": {
      "runtime": {
         "requires": {
            "PostgreSQL": "17.0.0"
         }
      }
   },
   "provides": {
      "pg_vault_tde": {
         "abstract": "Transparent Data Encryption (TDE) for PostgreSQL via a custom Table Access Method",
         "docfile": "doc/pg_vault_tde.md",
         "file": "sql/pg_vault_tde--1.7.sql",
         "version": "1.7.0"
      }
   },
   "tags": ["encryption", "tde", "transparent data encryption", "aes", "aes-256-gcm", "security", "table access method", "encrypted_heap", "kms", "vault", "hsm", "pkcs11", "pkcs12"],
   "resources": {
      "bugtracker": {
         "web": "https://github.com/labmiriade/pg_vault_tde/issues"
      },
      "homepage": "https://www.miriade.it/en/products/pg-vault-tde-it",
      "repository": {
         "type": "git",
         "url": "https://github.com/labmiriade/pg_vault_tde.git",
         "web": "https://github.com/labmiriade/pg_vault_tde"
      }
   }
}