title: Encryption / Security on a WebApp
body: <p>We have a web app, which is written in Java, and storing data into a PostgreSQL database.</p>
  
  <p>We'd like to encrypt a few fields in our database, as well as some uploaded documents.  However, these all need to be 2-way encryption (ie, we need to be able to decrypt them), and decryption needs to be fairly fast.</p>
  
  <p>However, we cannot come up with a "secure" method to actually encrypt/decrypt the data.  Because this is a web-app, and there is no client, all of the encryption keys are going to be stored either on the web server (in plaintext, or our actual code), or the database server.</p>
  
  <p>Any other ideas on how to actually make this at least moderately ... secure?</p>