mirror of https://github.com/postgres/postgres
This removes a portion of infrastructure introduced by fe0a0b5 to allow
compilation of Postgres in environments where no strong random source is
available, meaning that there is no linking to OpenSSL and no
/dev/urandom (Windows having its own CryptoAPI). No systems shipped
this century lack /dev/urandom, and the buildfarm is actually not
testing this switch at all, so just remove it. This simplifies
particularly some backend code which included a fallback implementation
using shared memory, and removes a set of alternate regression output
files from pgcrypto.
Author: Michael Paquier
Reviewed-by: Tom Lane
Discussion: https://postgr.es/m/20181230063219.GG608@paquier.xyz
pull/36/head
Michael Paquier
7 years ago
parent
d880b208e5
commit
1707a0d2aa
@ -1,42 +0,0 @@ |
|||||||
-- |
|
||||||
-- PGP compression support |
|
||||||
-- |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
|
|
||||||
ww0ECQMCsci6AdHnELlh0kQB4jFcVwHMJg0Bulop7m3Mi36s15TAhBo0AnzIrRFrdLVCkKohsS6+ |
|
||||||
DMcmR53SXfLoDJOv/M8uKj3QSq7oWNIp95pxfA== |
|
||||||
=tbSn |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'key', 'expect-compress-algo=1'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret message', 'key', 'compress-algo=0'), |
|
||||||
'key', 'expect-compress-algo=0'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret message', 'key', 'compress-algo=1'), |
|
||||||
'key', 'expect-compress-algo=1'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret message', 'key', 'compress-algo=2'), |
|
||||||
'key', 'expect-compress-algo=2'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- level=0 should turn compression off |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret message', 'key', |
|
||||||
'compress-algo=2, compress-level=0'), |
|
||||||
'key', 'expect-compress-algo=0'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
@ -1,424 +0,0 @@ |
|||||||
-- |
|
||||||
-- pgp_descrypt tests |
|
||||||
-- |
|
||||||
-- Checking ciphers |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.blowfish.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBAMCfFNwxnvodX9g0jwB4n4s26/g5VmKzVab1bX1SmwY7gvgvlWdF3jKisvS |
|
||||||
yA6Ce1QTMK3KdL2MPfamsTUSAML8huCJMwYQFfE= |
|
||||||
=JcP+ |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCci97v0Q6Z0Zg0kQBsVf5Oe3iC+FBzUmuMV9KxmAyOMyjCc/5i8f1Eest |
|
||||||
UTAsG35A1vYs02VARKzGz6xI2UHwFUirP+brPBg3Ee7muOx8pA== |
|
||||||
=XtrP |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes192.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0ECAMCI7YQpWqp3D1g0kQBCjB7GlX7+SQeXNleXeXQ78ZAPNliquGDq9u378zI |
|
||||||
5FPTqAhIB2/2fjY8QEIs1ai00qphjX2NitxV/3Wn+6dufB4Q4g== |
|
||||||
=rCZt |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes256.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0ECQMC4f/5djqCC1Rg0kQBTHEPsD+Sw7biBsM2er3vKyGPAQkuTBGKC5ie7hT/ |
|
||||||
lceMfQdbAg6oTFyJpk/wH18GzRDphCofg0X8uLgkAKMrpcmgog== |
|
||||||
=fB6S |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- Checking MDC modes |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.nomdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCnv07rlXqWctgyS2Dm2JfOKCRL4sLSLJUC8RS2cH7cIhKSuLitOtyquB+ |
|
||||||
u9YkgfJfsuRJmgQ9tmo= |
|
||||||
=60ui |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCEeP3idNjQ1Bg0kQBf4G0wX+2QNzLh2YNwYkQgQkfYhn/hLXjV4nK9nsE |
|
||||||
8Ex1Dsdt5UPvOz8W8VKQRS6loOfOe+yyXil8W3IYFwUpdDUi+Q== |
|
||||||
=moGf |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- Checking hashes |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.md5.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMClrXXtOXetohg0kQBn0Kl1ymevQZRHkdoYRHgzCwSQEiss7zYff2UNzgO |
|
||||||
KyRrHf7zEBuZiZ2AG34jNVMOLToj1jJUg5zTSdecUzQVCykWTA== |
|
||||||
=NyLk |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCApbdlrURoWJg0kQBzHM/E0o7djY82bNuspjxjAcPFrrtp0uvDdMQ4z2m |
|
||||||
/PM8jhgI5vxFYfNQjLl8y3fHYIomk9YflN9K/Q13iq8A8sjeTw== |
|
||||||
=FxbQ |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- Checking S2K modes |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k0.z0 |
|
||||||
|
|
||||||
jAQEBwAC0kQBKTaLAKE3xzps+QIZowqRNb2eAdzBw2LxEW2YD5PgNlbhJdGg+dvw |
|
||||||
Ah9GXjGS1TVALzTImJbz1uHUZRfhJlFbc5yGQw== |
|
||||||
=YvkV |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k1.z0 |
|
||||||
|
|
||||||
jAwEBwEC/QTByBLI3b/SRAHPxKzI6SZBo5lAEOD+EsvKQWO4adL9tDY+++Iqy1xK |
|
||||||
4IaWXVKEj9R2Lr2xntWWMGZtcKtjD2lFFRXXd9dZp1ZThNDz |
|
||||||
=dbXm |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCEq4Su3ZqNEJg0kQB4QG5jBTKF0i04xtH+avzmLhstBNRxvV3nsmB3cwl |
|
||||||
z+9ZaA/XdSx5ZiFnMym8P6r8uY9rLjjNptvvRHlxIReF+p9MNg== |
|
||||||
=VJKg |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes192.sha1.mdc.s2k0.z0 |
|
||||||
|
|
||||||
jAQECAAC0kQBBDnQWkgsx9YFaqDfWmpsiyAJ6y2xG/sBvap1dySYEMuZ+wJTXQ9E |
|
||||||
Cr3i2M7TgVZ0M4jp4QL0adG1lpN5iK7aQeOwMw== |
|
||||||
=cg+i |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes192.sha1.mdc.s2k1.z0 |
|
||||||
|
|
||||||
jAwECAECruOfyNDFiTnSRAEVoGXm4A9UZKkWljdzjEO/iaE7mIraltIpQMkiqCh9 |
|
||||||
7h8uZ2u9uRBOv222fZodGvc6bvq/4R4hAa/6qSHtm8mdmvGt |
|
||||||
=aHmC |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes192.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0ECAMCjFn6SRi3SONg0kQBqtSHPaD0m7rXfDAhCWU/ypAsI93GuHGRyM99cvMv |
|
||||||
q6eF6859ZVnli3BFSDSk3a4e/pXhglxmDYCfjAXkozKNYLo6yw== |
|
||||||
=K0LS |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes256.sha1.mdc.s2k0.z0 |
|
||||||
|
|
||||||
jAQECQAC0kQB4L1eMbani07XF2ZYiXNK9LW3v8w41oUPl7dStmrJPQFwsdxmrDHu |
|
||||||
rQr3WbdKdY9ufjOE5+mXI+EFkSPrF9rL9NCq6w== |
|
||||||
=RGts |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes256.sha1.mdc.s2k1.z0 |
|
||||||
|
|
||||||
jAwECQECKHhrou7ZOIXSRAHWIVP+xjVQcjAVBTt+qh9SNzYe248xFTwozkwev3mO |
|
||||||
+KVJW0qhk0An+Y2KF99/bYFl9cL5D3Tl43fC8fXGl3x3m7pR |
|
||||||
=SUrU |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes256.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0ECQMCjc8lwZu8Fz1g0kQBkEzjImi21liep5jj+3dAJ2aZFfUkohi8b3n9z+7+ |
|
||||||
4+NRzL7cMW2RLAFnJbiqXDlRHMwleeuLN1up2WIxsxtYYuaBjA== |
|
||||||
=XZrG |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'foobar'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- Checking longer passwords |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCx6dBiuqrYNRg0kQBEo63AvA1SCslxP7ayanLf1H0/hlk2nONVhTwVEWi |
|
||||||
tTGup1mMz6Cfh1uDRErUuXpx9A0gdMu7zX0o5XjrL7WGDAZdSw== |
|
||||||
=XKKG |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), '0123456789abcdefghij'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCBDvYuS990iFg0kQBW31UK5OiCjWf5x6KJ8qNNT2HZWQCjCBZMU0XsOC6 |
|
||||||
CMxFKadf144H/vpoV9GA0f22keQgCl0EsTE4V4lweVOPTKCMJg== |
|
||||||
=gWDh |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), '0123456789abcdefghij2jk4h5g2j54khg23h54g2kh54g2khj54g23hj54'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCqXbFafC+ofVg0kQBejyiPqH0QMERVGfmPOjtAxvyG5KDIJPYojTgVSDt |
|
||||||
FwsDabdQUz5O7bgNSnxfmyw1OifGF+W2bIn/8W+0rDf8u3+O+Q== |
|
||||||
=OxOF |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'x'); |
|
||||||
pgp_sym_decrypt |
|
||||||
----------------- |
|
||||||
Secret message. |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- Checking various data |
|
||||||
select encode(digest(pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat1.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCGJ+SpuOysINg0kQBJfSjzsW0x4OVcAyr17O7FBvMTwIGeGcJd99oTQU8 |
|
||||||
Xtx3kDqnhUq9Z1fS3qPbi5iNP2A9NxOBxPWz2JzxhydANlgbxg== |
|
||||||
=W/ik |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), '0123456789abcdefghij'), 'sha1'), 'hex'); |
|
||||||
encode |
|
||||||
------------------------------------------ |
|
||||||
0225e3ede6f2587b076d021a189ff60aad67e066 |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- expected: 0225e3ede6f2587b076d021a189ff60aad67e066 |
|
||||||
select encode(digest(pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat2.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCvdpDvidNzMxg0jUBvj8eS2+1t/9/zgemxvhtc0fvdKGGbjH7dleaTJRB |
|
||||||
SaV9L04ky1qECNDx3XjnoKLC+H7IOQ== |
|
||||||
=Fxen |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), '0123456789abcdefghij'), 'sha1'), 'hex'); |
|
||||||
encode |
|
||||||
------------------------------------------ |
|
||||||
da39a3ee5e6b4b0d3255bfef95601890afd80709 |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- expected: da39a3ee5e6b4b0d3255bfef95601890afd80709 |
|
||||||
select encode(digest(pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: dat3.aes.sha1.mdc.s2k3.z0 |
|
||||||
|
|
||||||
jA0EBwMCxQvxJZ3G/HRg0lgBeYmTa7/uDAjPyFwSX4CYBgpZWVn/JS8JzILrcWF8 |
|
||||||
gFnkUKIE0PSaYFp+Yi1VlRfUtRQ/X/LYNGa7tWZS+4VQajz2Xtz4vUeAEiYFYPXk |
|
||||||
73Hb8m1yRhQK |
|
||||||
=ivrD |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), '0123456789abcdefghij'), 'sha1'), 'hex'); |
|
||||||
encode |
|
||||||
------------------------------------------ |
|
||||||
5e5c135efc0dd00633efc6dfd6e731ea408a5b4c |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- expected: 5e5c135efc0dd00633efc6dfd6e731ea408a5b4c |
|
||||||
-- Checking CRLF |
|
||||||
select encode(digest(pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: crlf mess |
|
||||||
|
|
||||||
ww0ECQMCt7VAtby6l4Bi0lgB5KMIZiiF/b3CfMfUyY0eDncsGXtkbu1X+l9brjpMP8eJnY79Amms |
|
||||||
a3nsOzKTXUfS9VyaXo8IrncM6n7fdaXpwba/3tNsAhJG4lDv1k4g9v8Ix2dfv6Rs |
|
||||||
=mBP9 |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'key', 'convert-crlf=0'), 'sha1'), 'hex'); |
|
||||||
encode |
|
||||||
------------------------------------------ |
|
||||||
9353062be7720f1446d30b9e75573a4833886784 |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- expected: 9353062be7720f1446d30b9e75573a4833886784 |
|
||||||
select encode(digest(pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
Comment: crlf mess |
|
||||||
|
|
||||||
ww0ECQMCt7VAtby6l4Bi0lgB5KMIZiiF/b3CfMfUyY0eDncsGXtkbu1X+l9brjpMP8eJnY79Amms |
|
||||||
a3nsOzKTXUfS9VyaXo8IrncM6n7fdaXpwba/3tNsAhJG4lDv1k4g9v8Ix2dfv6Rs |
|
||||||
=mBP9 |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'key', 'convert-crlf=1'), 'sha1'), 'hex'); |
|
||||||
encode |
|
||||||
------------------------------------------ |
|
||||||
7efefcab38467f7484d6fa43dc86cf5281bd78e2 |
|
||||||
(1 row) |
|
||||||
|
|
||||||
-- expected: 7efefcab38467f7484d6fa43dc86cf5281bd78e2 |
|
||||||
-- check BUG #11905, problem with messages 6 less than a power of 2. |
|
||||||
select pgp_sym_decrypt(pgp_sym_encrypt(repeat('x',65530),'1'),'1') = repeat('x',65530); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- expected: true |
|
||||||
-- Negative tests |
|
||||||
-- Decryption with a certain incorrect key yields an apparent Literal Data |
|
||||||
-- packet reporting its content to be binary data. Ciphertext source: |
|
||||||
-- iterative pgp_sym_encrypt('secret', 'key') until the random prefix gave |
|
||||||
-- rise to that property. |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
|
|
||||||
ww0EBwMCxf8PTrQBmJdl0jcB6y2joE7GSLKRv7trbNsF5Z8ou5NISLUg31llVH/S0B2wl4bvzZjV |
|
||||||
VsxxqLSPzNLAeIspJk5G |
|
||||||
=mSd/ |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'wrong-key', 'debug=1'); |
|
||||||
NOTICE: dbg: prefix_init: corrupt prefix |
|
||||||
NOTICE: dbg: parse_literal_data: data type=b |
|
||||||
NOTICE: dbg: mdcbuf_finish: bad MDC pkt hdr |
|
||||||
ERROR: Wrong key or corrupt data |
|
||||||
-- Routine text/binary mismatch. |
|
||||||
select pgp_sym_decrypt(pgp_sym_encrypt_bytea('P', 'key'), 'key', 'debug=1'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- Decryption with a certain incorrect key yields an apparent BZip2-compressed |
|
||||||
-- plaintext. Ciphertext source: iterative pgp_sym_encrypt('secret', 'key') |
|
||||||
-- until the random prefix gave rise to that property. |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
|
|
||||||
ww0EBwMC9rK/dMkF5Zlt0jcBlzAQ1mQY2qYbKYbw8h3EZ5Jk0K2IiY92R82TRhWzBIF/8cmXDPtP |
|
||||||
GXsd65oYJZp3Khz0qfyn |
|
||||||
=Nmpq |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'wrong-key', 'debug=1'); |
|
||||||
NOTICE: dbg: prefix_init: corrupt prefix |
|
||||||
NOTICE: dbg: parse_compressed_data: bzip2 unsupported |
|
||||||
NOTICE: dbg: mdcbuf_finish: bad MDC pkt hdr |
|
||||||
ERROR: Wrong key or corrupt data |
|
||||||
-- Routine use of BZip2 compression. Ciphertext source: |
|
||||||
-- echo x | gpg --homedir /nonexistent --personal-compress-preferences bzip2 \ |
|
||||||
-- --personal-cipher-preferences aes --no-emit-version --batch \ |
|
||||||
-- --symmetric --passphrase key --armor |
|
||||||
select pgp_sym_decrypt(dearmor(' |
|
||||||
-----BEGIN PGP MESSAGE----- |
|
||||||
|
|
||||||
jA0EBwMCRhFrAKNcLVJg0mMBLJG1cCASNk/x/3dt1zJ+2eo7jHfjgg3N6wpB3XIe |
|
||||||
QCwkWJwlBG5pzbO5gu7xuPQN+TbPJ7aQ2sLx3bAHhtYb0i3vV9RO10Gw++yUyd4R |
|
||||||
UCAAw2JRIISttRHMfDpDuZJpvYo= |
|
||||||
=AZ9M |
|
||||||
-----END PGP MESSAGE----- |
|
||||||
'), 'key', 'debug=1'); |
|
||||||
NOTICE: dbg: parse_compressed_data: bzip2 unsupported |
|
||||||
ERROR: Unsupported compression algorithm |
|
||||||
@ -1,161 +0,0 @@ |
|||||||
-- |
|
||||||
-- PGP encrypt |
|
||||||
-- |
|
||||||
-- ensure consistent test output regardless of the default bytea format |
|
||||||
SET bytea_output TO escape; |
|
||||||
select pgp_sym_decrypt(pgp_sym_encrypt('Secret.', 'key'), 'key'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- check whether the defaults are ok |
|
||||||
select pgp_sym_decrypt(pgp_sym_encrypt('Secret.', 'key'), |
|
||||||
'key', 'expect-cipher-algo=aes128, |
|
||||||
expect-disable-mdc=0, |
|
||||||
expect-sess-key=0, |
|
||||||
expect-s2k-mode=3, |
|
||||||
expect-s2k-digest-algo=sha1, |
|
||||||
expect-compress-algo=0 |
|
||||||
'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- maybe the expect- stuff simply does not work |
|
||||||
select pgp_sym_decrypt(pgp_sym_encrypt('Secret.', 'key'), |
|
||||||
'key', 'expect-cipher-algo=bf, |
|
||||||
expect-disable-mdc=1, |
|
||||||
expect-sess-key=1, |
|
||||||
expect-s2k-mode=0, |
|
||||||
expect-s2k-digest-algo=md5, |
|
||||||
expect-compress-algo=1 |
|
||||||
'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- bytea as text |
|
||||||
select pgp_sym_decrypt(pgp_sym_encrypt_bytea('Binary', 'baz'), 'baz'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- text as bytea |
|
||||||
select pgp_sym_decrypt_bytea(pgp_sym_encrypt('Text', 'baz'), 'baz'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- algorithm change |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'cipher-algo=bf'), |
|
||||||
'key', 'expect-cipher-algo=bf'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'cipher-algo=aes'), |
|
||||||
'key', 'expect-cipher-algo=aes128'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'cipher-algo=aes192'), |
|
||||||
'key', 'expect-cipher-algo=aes192'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- s2k change |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-mode=0'), |
|
||||||
'key', 'expect-s2k-mode=0'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-mode=1'), |
|
||||||
'key', 'expect-s2k-mode=1'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-mode=3'), |
|
||||||
'key', 'expect-s2k-mode=3'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- s2k count change |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-count=1024'), |
|
||||||
'key', 'expect-s2k-count=1024'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- s2k_count rounds up |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-count=65000000'), |
|
||||||
'key', 'expect-s2k-count=65000000'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- s2k digest change |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-digest-algo=md5'), |
|
||||||
'key', 'expect-s2k-digest-algo=md5'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 's2k-digest-algo=sha1'), |
|
||||||
'key', 'expect-s2k-digest-algo=sha1'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- sess key |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'sess-key=0'), |
|
||||||
'key', 'expect-sess-key=0'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'sess-key=1'), |
|
||||||
'key', 'expect-sess-key=1'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'sess-key=1, cipher-algo=bf'), |
|
||||||
'key', 'expect-sess-key=1, expect-cipher-algo=bf'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'sess-key=1, cipher-algo=aes192'), |
|
||||||
'key', 'expect-sess-key=1, expect-cipher-algo=aes192'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'sess-key=1, cipher-algo=aes256'), |
|
||||||
'key', 'expect-sess-key=1, expect-cipher-algo=aes256'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- no mdc |
|
||||||
select pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt('Secret.', 'key', 'disable-mdc=1'), |
|
||||||
'key', 'expect-disable-mdc=1'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- crlf |
|
||||||
select encode(pgp_sym_decrypt_bytea( |
|
||||||
pgp_sym_encrypt(E'1\n2\n3\r\n', 'key', 'convert-crlf=1'), |
|
||||||
'key'), 'hex'); |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- conversion should be lossless |
|
||||||
select encode(digest(pgp_sym_decrypt( |
|
||||||
pgp_sym_encrypt(E'\r\n0\n1\r\r\n\n2\r', 'key', 'convert-crlf=1'), |
|
||||||
'key', 'convert-crlf=1'), 'sha1'), 'hex') as result, |
|
||||||
encode(digest(E'\r\n0\n1\r\r\n\n2\r', 'sha1'), 'hex') as expect; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
@ -1,62 +0,0 @@ |
|||||||
-- |
|
||||||
-- PGP Public Key Encryption |
|
||||||
-- |
|
||||||
-- ensure consistent test output regardless of the default bytea format |
|
||||||
SET bytea_output TO escape; |
|
||||||
-- successful encrypt/decrypt |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=1; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=2; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=3; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=6; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- try with rsa-sign only |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=4; |
|
||||||
ERROR: No encryption key found |
|
||||||
-- try with secret key |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(seckey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=1; |
|
||||||
ERROR: Refusing to encrypt with secret key |
|
||||||
-- does text-to-bytea works |
|
||||||
select pgp_pub_decrypt_bytea( |
|
||||||
pgp_pub_encrypt('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=1; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
-- and bytea-to-text? |
|
||||||
select pgp_pub_decrypt( |
|
||||||
pgp_pub_encrypt_bytea('Secret msg', dearmor(pubkey)), |
|
||||||
dearmor(seckey)) |
|
||||||
from keytbl where keytbl.id=1; |
|
||||||
ERROR: generating random data is not supported by this build |
|
||||||
DETAIL: This functionality requires a source of strong random numbers. |
|
||||||
HINT: You need to rebuild PostgreSQL using --enable-strong-random. |
|
||||||
@ -1,158 +0,0 @@ |
|||||||
/*-------------------------------------------------------------------------
|
|
||||||
* |
|
||||||
* backend_random.c |
|
||||||
* Backend random number generation routine. |
|
||||||
* |
|
||||||
* pg_backend_random() function fills a buffer with random bytes. Normally, |
|
||||||
* it is just a thin wrapper around pg_strong_random(), but when compiled |
|
||||||
* with --disable-strong-random, we provide a built-in implementation. |
|
||||||
* |
|
||||||
* This function is used for generating nonces in authentication, and for |
|
||||||
* random salt generation in pgcrypto. The built-in implementation is not |
|
||||||
* cryptographically strong, but if the user asked for it, we'll go ahead |
|
||||||
* and use it anyway. |
|
||||||
* |
|
||||||
* The built-in implementation uses the standard erand48 algorithm, with |
|
||||||
* a seed shared between all backends. |
|
||||||
* |
|
||||||
* Portions Copyright (c) 1996-2018, PostgreSQL Global Development Group |
|
||||||
* Portions Copyright (c) 1994, Regents of the University of California |
|
||||||
* |
|
||||||
* |
|
||||||
* IDENTIFICATION |
|
||||||
* src/backend/utils/misc/backend_random.c |
|
||||||
* |
|
||||||
*------------------------------------------------------------------------- |
|
||||||
*/ |
|
||||||
|
|
||||||
#include "postgres.h" |
|
||||||
|
|
||||||
#include <sys/time.h> |
|
||||||
|
|
||||||
#include "miscadmin.h" |
|
||||||
#include "storage/lwlock.h" |
|
||||||
#include "storage/shmem.h" |
|
||||||
#include "utils/backend_random.h" |
|
||||||
#include "utils/timestamp.h" |
|
||||||
|
|
||||||
#ifdef HAVE_STRONG_RANDOM |
|
||||||
|
|
||||||
Size |
|
||||||
BackendRandomShmemSize(void) |
|
||||||
{ |
|
||||||
return 0; |
|
||||||
} |
|
||||||
|
|
||||||
void |
|
||||||
BackendRandomShmemInit(void) |
|
||||||
{ |
|
||||||
/* do nothing */ |
|
||||||
} |
|
||||||
|
|
||||||
bool |
|
||||||
pg_backend_random(char *dst, int len) |
|
||||||
{ |
|
||||||
/* should not be called in postmaster */ |
|
||||||
Assert(IsUnderPostmaster || !IsPostmasterEnvironment); |
|
||||||
|
|
||||||
return pg_strong_random(dst, len); |
|
||||||
} |
|
||||||
|
|
||||||
#else |
|
||||||
|
|
||||||
/*
|
|
||||||
* Seed for the PRNG, stored in shared memory. |
|
||||||
* |
|
||||||
* Protected by BackendRandomLock. |
|
||||||
*/ |
|
||||||
typedef struct |
|
||||||
{ |
|
||||||
bool initialized; |
|
||||||
unsigned short seed[3]; |
|
||||||
} BackendRandomShmemStruct; |
|
||||||
|
|
||||||
static BackendRandomShmemStruct * BackendRandomShmem; |
|
||||||
|
|
||||||
Size |
|
||||||
BackendRandomShmemSize(void) |
|
||||||
{ |
|
||||||
return sizeof(BackendRandomShmemStruct); |
|
||||||
} |
|
||||||
|
|
||||||
void |
|
||||||
BackendRandomShmemInit(void) |
|
||||||
{ |
|
||||||
bool found; |
|
||||||
|
|
||||||
BackendRandomShmem = (BackendRandomShmemStruct *) |
|
||||||
ShmemInitStruct("Backend PRNG state", |
|
||||||
BackendRandomShmemSize(), |
|
||||||
&found); |
|
||||||
|
|
||||||
if (!IsUnderPostmaster) |
|
||||||
{ |
|
||||||
Assert(!found); |
|
||||||
|
|
||||||
BackendRandomShmem->initialized = false; |
|
||||||
} |
|
||||||
else |
|
||||||
Assert(found); |
|
||||||
} |
|
||||||
|
|
||||||
bool |
|
||||||
pg_backend_random(char *dst, int len) |
|
||||||
{ |
|
||||||
int i; |
|
||||||
char *end = dst + len; |
|
||||||
|
|
||||||
/* should not be called in postmaster */ |
|
||||||
Assert(IsUnderPostmaster || !IsPostmasterEnvironment); |
|
||||||
|
|
||||||
LWLockAcquire(BackendRandomLock, LW_EXCLUSIVE); |
|
||||||
|
|
||||||
/*
|
|
||||||
* Seed the PRNG on the first use. |
|
||||||
*/ |
|
||||||
if (!BackendRandomShmem->initialized) |
|
||||||
{ |
|
||||||
struct timeval now; |
|
||||||
|
|
||||||
gettimeofday(&now, NULL); |
|
||||||
|
|
||||||
BackendRandomShmem->seed[0] = now.tv_sec; |
|
||||||
BackendRandomShmem->seed[1] = (unsigned short) (now.tv_usec); |
|
||||||
BackendRandomShmem->seed[2] = (unsigned short) (now.tv_usec >> 16); |
|
||||||
|
|
||||||
/*
|
|
||||||
* Mix in the cancel key, generated by the postmaster. This adds what |
|
||||||
* little entropy the postmaster had to the seed. |
|
||||||
*/ |
|
||||||
BackendRandomShmem->seed[0] ^= (MyCancelKey); |
|
||||||
BackendRandomShmem->seed[1] ^= (MyCancelKey >> 16); |
|
||||||
|
|
||||||
BackendRandomShmem->initialized = true; |
|
||||||
} |
|
||||||
|
|
||||||
for (i = 0; dst < end; i++) |
|
||||||
{ |
|
||||||
uint32 r; |
|
||||||
int j; |
|
||||||
|
|
||||||
/*
|
|
||||||
* pg_jrand48 returns a 32-bit integer. Fill the next 4 bytes from it. |
|
||||||
*/ |
|
||||||
r = (uint32) pg_jrand48(BackendRandomShmem->seed); |
|
||||||
|
|
||||||
for (j = 0; j < 4 && dst < end; j++) |
|
||||||
{ |
|
||||||
*(dst++) = (char) (r & 0xFF); |
|
||||||
r >>= 8; |
|
||||||
} |
|
||||||
} |
|
||||||
LWLockRelease(BackendRandomLock); |
|
||||||
|
|
||||||
return true; |
|
||||||
} |
|
||||||
|
|
||||||
|
|
||||||
#endif /* HAVE_STRONG_RANDOM */ |
|
||||||
@ -1,19 +0,0 @@ |
|||||||
/*-------------------------------------------------------------------------
|
|
||||||
* |
|
||||||
* backend_random.h |
|
||||||
* Declarations for backend random number generation |
|
||||||
* |
|
||||||
* Portions Copyright (c) 1996-2018, PostgreSQL Global Development Group |
|
||||||
* |
|
||||||
* src/include/utils/backend_random.h |
|
||||||
* |
|
||||||
*------------------------------------------------------------------------- |
|
||||||
*/ |
|
||||||
#ifndef BACKEND_RANDOM_H |
|
||||||
#define BACKEND_RANDOM_H |
|
||||||
|
|
||||||
extern Size BackendRandomShmemSize(void); |
|
||||||
extern void BackendRandomShmemInit(void); |
|
||||||
extern bool pg_backend_random(char *dst, int len); |
|
||||||
|
|
||||||
#endif /* BACKEND_RANDOM_H */ |
|
||||||
Loading…
Reference in new issue