You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Noah Misch e5981aebde pgcrypto: Report errant decryption as "Wrong key or corrupt data". ... This has been the predominant outcome. When the output of decrypting with a wrong key coincidentally resembled an OpenPGP packet header, pgcrypto could instead report "Corrupt data", "Not text data" or "Unsupported compression algorithm". The distinct "Corrupt data" message added no value. The latter two error messages misled when the decrypted payload also exhibited fundamental integrity problems. Worse, error message variance in other systems has enabled cryptologic attacks; see RFC 4880 section "14. Security Considerations". Whether these pgcrypto behaviors are likewise exploitable is unknown. In passing, document that pgcrypto does not resist side-channel attacks. Back-patch to 9.0 (all supported versions). Security: CVE-2015-3167		11 years ago
..
src	pgcrypto: Report errant decryption as "Wrong key or corrupt data".	11 years ago
KNOWN_BUGS	Remove extra newlines at end and beginning of files, add missing newlines	16 years ago
MISSING_FEATURES	Remove extra newlines at end and beginning of files, add missing newlines	16 years ago
Makefile	Add maintainer-check target	15 years ago
TODO	Update URL.	18 years ago
bug.template	Stamp 9.1.15.	11 years ago