You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Noah Misch e5981aebde pgcrypto: Report errant decryption as "Wrong key or corrupt data". ... This has been the predominant outcome. When the output of decrypting with a wrong key coincidentally resembled an OpenPGP packet header, pgcrypto could instead report "Corrupt data", "Not text data" or "Unsupported compression algorithm". The distinct "Corrupt data" message added no value. The latter two error messages misled when the decrypted payload also exhibited fundamental integrity problems. Worse, error message variance in other systems has enabled cryptologic attacks; see RFC 4880 section "14. Security Considerations". Whether these pgcrypto behaviors are likewise exploitable is unknown. In passing, document that pgcrypto does not resist side-channel attacks. Back-patch to 9.0 (all supported versions). Security: CVE-2015-3167		11 years ago
..
3des.out	Fix some more regression tests (missed these because they're only	17 years ago
blowfish.out	Remove useless whitespace at end of lines	15 years ago
cast5.out	Fix some more regression tests (missed these because they're only	17 years ago
crypt-blowfish.out	Remove useless whitespace at end of lines	15 years ago
crypt-des.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
crypt-md5.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
crypt-xdes.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
des.out	Fix some more regression tests (missed these because they're only	17 years ago
hmac-md5.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
hmac-sha1.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
init.out	Convert contrib modules to use the extension facility.	15 years ago
md5.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
pgp-armor.out	Improve psql's tabular display of wrapped-around data by inserting markers	16 years ago
pgp-compression.out	Add missing pgcrypto files from previous commit.	21 years ago
pgp-decrypt.out	pgcrypto: Report errant decryption as "Wrong key or corrupt data".	11 years ago
pgp-encrypt-DISABLED.out	Add missing pgcrypto files from previous commit.	21 years ago
pgp-encrypt.out	Ooops, missed that a couple of contrib modules have calls to byteacmp.	17 years ago
pgp-info.out	Fix buffer overrun after incomplete read in pullf_read_max().	11 years ago
pgp-pubkey-DISABLED.out	Add missing pgcrypto files from previous commit.	21 years ago
pgp-pubkey-decrypt.out	pgcrypto: Report errant decryption as "Wrong key or corrupt data".	11 years ago
pgp-pubkey-encrypt.out	Ooops, missed that a couple of contrib modules have calls to byteacmp.	17 years ago
pgp-zlib-DISABLED.out	Add missing pgcrypto files from previous commit.	21 years ago
rijndael.out	Remove useless whitespace at end of lines	15 years ago
sha1.out	SET autocommit no longer needed in /contrib because pg_regress.sh does	23 years ago
sha2.out	"Annual" pgcrypto update from Marko Kreen:	20 years ago