Pgsodium 2.0.0: Modern cryptography for PostgreSQL

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • pgsodium

    Modern cryptography for PostgreSQL using libsodium.

  • libsodium-xchacha20-siv

    Deterministic/nonce-reuse resistant authenticated encryption scheme using XChaCha20, implemented on libsodium.

  • From Mike's comments on Reddit[0]

    pgsodium 2.0.0 is a postgres extension that uses the libsodium library to provide high-performance, modern cryptography support for PostgreSQL 10+.

    2.0.0 includes a ton of new feature and a few bug-fixes:

    * Support for XChaCha20-SIV[2] deterministic nonce-free encryption

    * Support for SignCryption[3] Sign & Encrypt identity verification

    * Key id support for HMACSHA 512/256, generichash, and shorthash

    * Support for low level XChaCha20 streaming[4]

    * More tests, docs, and small bug fixes in argument parsing

    * In-memory key now protected with sodium_malloc[5]

    [0] https://www.reddit.com/r/PostgreSQL/comments/s0b6o2/pgsodium...

    [1] https://doc.libsodium.org/

    [2] https://github.com/jedisct1/libsodium-xchacha20-siv

    [3] https://github.com/jedisct1/libsodium-signcryption

    [4] https://libsodium.gitbook.io/doc/advanced/stream_ciphers/xch...

    [5] https://libsodium.gitbook.io/doc/memory_management

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • libsodium-signcryption

    Signcryption using libsodium.

  • From Mike's comments on Reddit[0]

    pgsodium 2.0.0 is a postgres extension that uses the libsodium library to provide high-performance, modern cryptography support for PostgreSQL 10+.

    2.0.0 includes a ton of new feature and a few bug-fixes:

    * Support for XChaCha20-SIV[2] deterministic nonce-free encryption

    * Support for SignCryption[3] Sign & Encrypt identity verification

    * Key id support for HMACSHA 512/256, generichash, and shorthash

    * Support for low level XChaCha20 streaming[4]

    * More tests, docs, and small bug fixes in argument parsing

    * In-memory key now protected with sodium_malloc[5]

    [0] https://www.reddit.com/r/PostgreSQL/comments/s0b6o2/pgsodium...

    [1] https://doc.libsodium.org/

    [2] https://github.com/jedisct1/libsodium-xchacha20-siv

    [3] https://github.com/jedisct1/libsodium-signcryption

    [4] https://libsodium.gitbook.io/doc/advanced/stream_ciphers/xch...

    [5] https://libsodium.gitbook.io/doc/memory_management

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts