ClickHouse/tests/config/config.d/encryption.xml

<yandex>
    <encryption>
        <!-- "Some fixed key that is at least 16 bytes long" in Base64 -->
        <key_command>echo "U29tZSBmaXhlZCBrZXkgdGhhdCBpcyBhdCBsZWFzdCAxNiBieXRlcyBsb25n"</key_command>
    </encryption>
</yandex>
Add a codec AES_128_GCM_SIV for encrypting columns on disk (#19896) * Add a codec Encrypted() for encrypting columns on disk While this is implemented as a compression codec, it does not actually compress data. It instead encrypts data on disk. The key is obtained by executing a user-specified command at the server startup, or if it's not specified the codec refuses to process any data. For now the only supported cipher is 'AES-128-GCM-SIV'. 2021-07-30 09:12:33 +00:00			`<yandex>`
			`<encryption>`
			`<!-- "Some fixed key that is at least 16 bytes long" in Base64 -->`
			`<key_command>echo "U29tZSBmaXhlZCBrZXkgdGhhdCBpcyBhdCBsZWFzdCAxNiBieXRlcyBsb25n"</key_command>`
			`</encryption>`
			`</yandex>`