Updated on 2026-01-04 GMT+08:00

PG_TDE

PG_TDE stores information about transparent encryption keys. This system catalog is supported only by clusters of version 9.1.1.200 or later.

Table 1 PG_TDE columns

Name

Type

Description

encryptalgo

char

Cryptographic algorithm. Two types of algorithms are supported.

  • a: AES algorithm
  • s: SM4 algorithm

dekcipher

text

Data encryption key

cekid

text

Master key (used to encrypt the data encryption key)

Example

1
2
3
4
5
6
SELECT * FROM pg_tde;
encryptalgo|                                        dekcipher                                                 |                          cekid 
-----------+--------------------------------------------------------------------------------------------------+----------------------------------------------------------
    a      | a472d0d8f95a4449e4138b2dd39fdacdd516311a9163c912340229a43da092656a994b7bb0e3cee5bc438aafcbb99889 |     fb234337-45b3-4cab-8bfe-0086b983c4c3
    s      | 74937c481f70445f90bb0e1831431353cbb4a3203535bf67432455275d6a93bf531310301f690b5274078114e2431311 |     fb234337-45b3-4cab-8bfe-0086b983c4c3
(2 rows)