\! gs_ktool -d all
DELETE ALL
\! gs_ktool -g
GENERATE
1
DROP CLIENT MASTER KEY IF EXISTS MyCMK CASCADE;
NOTICE: client master key "mycmk" does not exist
CREATE CLIENT MASTER KEY MyCMK WITH ( KEY_STORE = gs_ktool , KEY_PATH = "gs_ktool/1" , ALGORITHM = AES_256_CBC);
CREATE COLUMN ENCRYPTION KEY MyCEK WITH VALUES (CLIENT_MASTER_KEY = MyCMK, ALGORITHM = AEAD_AES_256_CBC_HMAC_SHA256);
CREATE TABLE IF NOT EXISTS t_varchar(id INT, name varchar(50) ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = MyCEK, ENCRYPTION_TYPE = DETERMINISTIC)) with (orientation=column);
INSERT INTO t_varchar (id, name) VALUES (1, 'MyName');
SELECT * from t_varchar order by id;
id | name
----+--------
1 | MyName
(1 row)
drop table t_varchar;
CREATE TABLE IF NOT EXISTS t_int(id INT, num int ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = MyCEK, ENCRYPTION_TYPE = DETERMINISTIC)) with (orientation=column);
INSERT INTO t_int (id, num) VALUES (1, 500);
SELECT * from t_int order by id;
id | num
----+-----
1 | 500
(1 row)
drop table t_int;
DROP COLUMN ENCRYPTION KEY MyCEK;
DROP CLIENT MASTER KEY MyCMK;
\! gs_ktool -d all
DELETE ALL
1