You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Noah Misch 85270ac7a2 pgcrypto: Report errant decryption as "Wrong key or corrupt data". ... This has been the predominant outcome. When the output of decrypting with a wrong key coincidentally resembled an OpenPGP packet header, pgcrypto could instead report "Corrupt data", "Not text data" or "Unsupported compression algorithm". The distinct "Corrupt data" message added no value. The latter two error messages misled when the decrypted payload also exhibited fundamental integrity problems. Worse, error message variance in other systems has enabled cryptologic attacks; see RFC 4880 section "14. Security Considerations". Whether these pgcrypto behaviors are likewise exploitable is unknown. In passing, document that pgcrypto does not resist side-channel attacks. Back-patch to 9.0 (all supported versions). Security: CVE-2015-3167		11 years ago
..
3des.out	…
blowfish.out	…
cast5.out	…
crypt-blowfish.out	…
crypt-des.out	…
crypt-md5.out	…
crypt-xdes.out	…
des.out	…
hmac-md5.out	…
hmac-sha1.out	…
init.out	Convert contrib modules to use the extension facility.	15 years ago
md5.out	…
pgp-armor.out	Add functions for dealing with PGP armor header lines to pgcrypto.	11 years ago
pgp-compression.out	…
pgp-decrypt.out	pgcrypto: Report errant decryption as "Wrong key or corrupt data".	11 years ago
pgp-encrypt-DISABLED.out	…
pgp-encrypt.out	Fix whitespace issues found by git diff --check, add gitattributes	12 years ago
pgp-info.out	Fix buffer overrun after incomplete read in pullf_read_max().	11 years ago
pgp-pubkey-DISABLED.out	…
pgp-pubkey-decrypt.out	pgcrypto: Report errant decryption as "Wrong key or corrupt data".	11 years ago
pgp-pubkey-encrypt.out	…
pgp-zlib-DISABLED.out	…
rijndael.out	…
sha1.out	…
sha2.out	…