| Configure PostgreSQL, operating system/file system, and additional software as relevant, to provide the required level of cryptographic protection for information requiring cryptographic protection against disclosure. |
Secure the premises, equipment, and media to provide the required level of physical protection.
The pgcrypto module provides cryptographic functions for PostgreSQL. See supplementary content APPENDIX-E for documentation on installing pgcrypto.
With pgcrypto installed, it is possible to insert encrypted data into the database:
INSERT INTO accounts(username, password) VALUES ('bob', crypt('mypass', gen_salt('bf', 4));