mirror of
https://github.com/supabase/supabase.git
synced 2026-10-18 15:49:09 +03:00
fe2e8704f7
* remove TCE blog * update pgsodium docs that its pending deprecation * Update apps/docs/content/guides/database/extensions/pgsodium.mdx Co-authored-by: Greg Richardson <greg.nmr@gmail.com> --------- Co-authored-by: Rodrigo Mansueli <rodrigo@mansueli.com> Co-authored-by: Greg Richardson <greg.nmr@gmail.com>
30 lines
2.0 KiB
Plaintext
30 lines
2.0 KiB
Plaintext
---
|
|
id: 'pgsodium'
|
|
title: 'pgsodium (pending deprecation): Encryption Features'
|
|
description: 'Encryption library for PostgreSQL'
|
|
---
|
|
|
|
Supabase DOES NOT RECOMMEND any new usage of [`pgsodium`](https://github.com/michelp/pgsodium).
|
|
|
|
The [`pgsodium`](https://github.com/michelp/pgsodium) extension is expected to go through a deprecation cycle in the near future. We will reach out to owners of impacted projects to assist with migrations away from [`pgsodium`](https://github.com/michelp/pgsodium) once the deprecation process begins.
|
|
|
|
[`pgsodium`](https://github.com/michelp/pgsodium) is a Postgres extension which provides SQL access to [`libsodium`'s](https://doc.libsodium.org/) high-level cryptographic algorithms.
|
|
|
|
Supabase previously documented two features derived from pgsodium. Namely [Server Key Management](https://github.com/michelp/pgsodium#server-key-management) and [Transparent Column Encryption](https://github.com/michelp/pgsodium#transparent-column-encryption). At this time, we do not recommend using either on the Supabase platform due to their high level of operational complexity and misconfiguration risk.
|
|
|
|
Note that Supabase projects are encrypted at rest by default which likely is sufficient for your compliance needs e.g. SOC2 & HIPAA.
|
|
|
|
## Get the root encryption key for your Supabase project
|
|
|
|
Encryption requires keys. Keeping the keys in the same database as the encrypted data would be unsafe. For more information about managing the `pgsodium` root encryption key on your Supabase project see **[encryption key location](/docs/guides/database/vault#encryption-key-location)**. This key is required to decrypt values stored in [Supabase Vault](/docs/guides/database/vault) and data encrypted with Transparent Column Encryption.
|
|
|
|
## Resources
|
|
|
|
- [Supabase Vault](/docs/guides/database/vault)
|
|
- Read more about Supabase Vault in the [blog post](https://supabase.com/blog/vault-now-in-beta)
|
|
- [Supabase Vault on GitHub](https://github.com/supabase/vault)
|
|
|
|
## Resources
|
|
|
|
- Official [`pgsodium` documentation](https://github.com/michelp/pgsodium)
|