I like the idea of using aes, but that is something to consider since pgsql seems to be gaining some ground out there. What about doing the aes encryption in php and then just passing the value to the database commands?