Example

COPY (
  SELECT customer_id, name, email, phone
  FROM customers
  WHERE region = 'US'
)
TO 'encrypted_customers.csv'
WITH (
  ENCRYPTION_KEY 'YourSecureKey123',
  HEADER true,
  DELIMITER ','
);

COPY (
  SELECT user_id, email, created_at, subscription_tier
  FROM users
  WHERE created_at > '2024-01-01'
)
TO 'encrypted_users.parquet'
WITH (
  ENCRYPTION_KEY 'YourBase64EncodedKey==',
  COMPRESSION 'ZSTD'
);

COPY (
  SELECT transaction_id, amount, timestamp, customer_id
  FROM transactions
  WHERE amount > 1000
)
TO 's3://my-bucket/encrypted-transactions.parquet'
WITH (
  ENCRYPTION_KEY 'YourBase64EncodedKey==',
  ROW_GROUP_SIZE 500000,
  COMPRESSION 'SNAPPY'
);

COPY (
  SELECT api_key, rate_limit, created_at, permissions
  FROM api_keys
  WHERE status = 'active'
)
TO 'signed_api_keys.json'
WITH (
  SIGNING_KEY 'your-hmac-secret-key',
  FORMAT 'ARRAY',
  PRETTY true
);

COPY (
  SELECT event_id, event_type, user_id, timestamp, payload
  FROM audit_events
  WHERE timestamp > CURRENT_DATE - INTERVAL 7 DAYS
)
TO 'signed_events.jsonl'
WITH (
  SIGNING_KEY 'audit-signing-key',
  FORMAT 'NEWLINE_DELIMITED'
);

SELECT * FROM crypto_audit_trail('financial_transactions', 'INSERT') LIMIT 5;

WITH audit AS (
  SELECT * FROM crypto_audit_trail('sensitive_data', 'UPDATE')
)
SELECT
  sequence_num,
  record_hash,
  chain_valid,
  CASE
    WHEN NOT chain_valid THEN 'TAMPERING DETECTED!'
    ELSE 'Valid'
  END AS status
FROM audit
WHERE NOT chain_valid;

INSERT INTO users (username, password_hash)
VALUES ('alice', crypto_bcrypt('secret_password'));

INSERT INTO admin_users (username, password_hash)
VALUES ('admin', crypto_bcrypt('admin_password', cost := 12));

SELECT crypto_bcrypt('my_password', cost := 14) AS secure_hash;

SELECT
  user_id,
  username,
  crypto_bcrypt_verify('user_input', password_hash) AS is_valid
FROM users
WHERE username = 'alice';

SELECT * FROM crypto_generate_keys(10) LIMIT 3;

SELECT * FROM crypto_generate_keys(5, key_size := 4096);

CREATE TABLE user_keys AS
SELECT
  key_id,
  public_key,
  private_key,
  created_at
FROM crypto_generate_keys(100);

INSERT INTO user_keypairs (user_id, public_key, private_key)
SELECT
  u.user_id,
  k.public_key,
  k.private_key
FROM users u
CROSS JOIN LATERAL crypto_generate_keys(1) k
WHERE u.needs_keypair = true;

SELECT crypto_hash_agg(email) AS users_fingerprint
FROM users;

SELECT
  DATE(created_at) AS batch_date,
  crypto_hash_agg(transaction_id) AS batch_hash
FROM transactions
GROUP BY DATE(created_at);

SELECT crypto_hash_agg(sensitive_field, algorithm := 'sha512') AS secure_hash
FROM sensitive_table;

WITH current_hash AS (
  SELECT crypto_hash_agg(data_column) AS hash FROM production_table
),
backup_hash AS (
  SELECT crypto_hash_agg(data_column) AS hash FROM backup_table
)
SELECT
  CASE
    WHEN c.hash = b.hash THEN 'Data matches'
    ELSE 'Data has changed!'
  END AS status
FROM current_hash c, backup_hash b;

SELECT crypto_hash_combine(first_name, last_name, email) AS user_fingerprint
FROM users;

SELECT crypto_hash_combine(
  customer_id::VARCHAR,
  order_date::VARCHAR,
  product_id::VARCHAR,
  quantity::VARCHAR
) AS order_key
FROM orders;

SELECT crypto_hash_combine('single value') AS hash;

SELECT DISTINCT ON (crypto_hash_combine(col1, col2, col3, col4, col5))
  *
FROM source_data;

SELECT
  request_id,
  payload,
  crypto_hmac_sha256(payload, 'my_secret_key') AS signature
FROM api_requests;

SELECT
  block_id,
  crypto_merkle_root(transaction_hash) AS merkle_root
FROM blockchain_transactions
GROUP BY block_id;

WITH daily_blocks AS (
  SELECT
    DATE(timestamp) AS date,
    crypto_merkle_root(record_id::VARCHAR) AS merkle_root
  FROM audit_log
  GROUP BY DATE(timestamp)
)
SELECT
  date,
  merkle_root,
  LAG(merkle_root) OVER (ORDER BY date) AS previous_root
FROM daily_blocks;

SELECT crypto_merkle_root(file_hash) AS manifest_hash
FROM uploaded_files
WHERE upload_batch_id = 'batch_123';

SELECT crypto_sha256('Hello, World!') AS hash;

SELECT
  crypto_sha256(email) AS user_id,
  COUNT(*) AS purchases
FROM orders
GROUP BY crypto_sha256(email)
ORDER BY purchases DESC
LIMIT 10;

SELECT crypto_sha512('sensitive data') AS hash;