Igor Fedorovich Turkanov, Deputy General Director of GRANIT Concern, made a key presentation at the CNews profile conference "DBMS: Technologies, Migration and Administration 2026", which was held on March 12 in Moscow. The participants focused on a presentation dedicated to the unique security capabilities of the Russian DBMS Quantum Hybrid Base.
In his speech, Igor Turkanov elaborated on the architecture of the product, which has been certified by the FSTEC since 2023, and since January 2024 by the FSB of Russia (registration number SF/124-4211) as a means of cryptographic information protection (SCSI). Quantum Hybrid Base is a commercial fork of PostgreSQL, but its main difference is the built-in QSS cryptographic module at the core level, which implements national encryption standards (GOST "Grasshopper", "Stribog").
The report demonstrated that encryption in Quantum Hybrid Base works transparently for applications: data is protected directly when written to disk and decrypted only when it enters RAM. This allows you to encrypt both the entire database and individual tables, and also provides backup protection.
"We are witnessing an unprecedented increase in the number of critical vulnerabilities in open PostgreSQL in February 2026 alone,— said Igor Turkanov. — Remote code execution, attacks through supply chains, access rights circumvention — all this makes systems vulnerable to targeted attacks, including using "criminal AI". Built-in core-level cryptography and Rust code refactoring minimize the attack surface: even with a leak, data files remain encrypted."
The part of the presentation devoted to the status of developers of the original code caused a special resonance. The speaker recalled that the University of California at Berkeley (UC Berkeley), which is one of the key participants in the global PostgreSQL Global Development Group community, was recognized by the decision of the Russian Ministry of Justice on March 2, 2026, as an organization whose activities are undesirable in the territory of the Russian Federation.
In this regard, Igor Turkanov emphasized the strategic importance of a fully independent Russian database management system: "We don't just take open source, we adapt and rewrite it. About 20% of the core has already been translated into the secure Rust language, which eliminates entire classes of vulnerabilities such as data races and memory leaks. We have been developing our own backup and clustering modules."
During the presentation, performance testing schedules were presented, which demonstrate that the overhead of cryptography is offset by increasing the volume of the buffer cache, even on entry-level hardware.
The conference participants, representing the largest banks, industrial holdings and government agencies, showed great interest in the possibility of using Quantum Hybrid Base to protect critical information infrastructure in the context of increased import substitution and information security requirements.
GRANIT Concern (granit-concern.ru) is a Russian developer of database management systems and integrated solutions in the field of information security. The DBMS Quantum Hybrid Base product has valid FSTEC and FSB of Russia certificates confirming the possibility of its use in government information systems and critical information infrastructure facilities.
