| From: | Michael Paquier <michael(dot)paquier(at)gmail(dot)com> |
|---|---|
| To: | Robert Haas <robertmhaas(at)gmail(dot)com> |
| Cc: | Andres Freund <andres(at)anarazel(dot)de>, Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, David Steele <david(at)pgmasters(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, David Fetter <david(at)fetter(dot)org>, Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Magnus Hagander <magnus(at)hagander(dot)net>, Julian Markwort <julian(dot)markwort(at)uni-muenster(dot)de>, Stephen Frost <sfrost(at)snowman(dot)net>, PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>, Valery Popov <v(dot)popov(at)postgrespro(dot)ru> |
| Subject: | Re: Password identifiers, protocol aging and SCRAM protocol |
| Date: | 2016-12-07 06:39:23 |
| Message-ID: | CAB7nPqRF=kVxqtC+Ei_t7eTrMti_0P+xUugSOd_7-rcLvREYzw@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On Tue, Nov 29, 2016 at 1:36 PM, Michael Paquier
<michael(dot)paquier(at)gmail(dot)com> wrote:
> Nothing more will likely happen in this CF, so I have moved it to
> 2017-01 with the same status of "Needs Review".
Attached is a new set of patches using the new routines
pg_backend_random() and pg_strong_random() to handle the randomness in
SCRAM:
- 0001 refactors the SHA2 routines. pgcrypto uses raw files from
src/common when compiling with this patch. That works on any platform,
and this is the simplified version of upthread.
- 0002 adds base64 routines to src/common.
- 0003 does some refactoring regarding the password encryption in
ALTER/CREATE USER queries.
- 0004 adds the clause PASSWORD (val USING method) in CREATE/ALTER USER.
- 0005 is the code patch for SCRAM. Note that this switches pgcrypto
to link to libpgcommon as SHA2 routines are used by the backend.
- 0006 adds some regression tests for passwords.
- 0007 adds some TAP tests for authentication.
This is added to the upcoming CF.
Thanks,
--
Michael
| Attachment | Content-Type | Size |
|---|---|---|
| 0001-Refactor-SHA2-functions-and-move-them-to-src-common.patch | application/x-download | 35.4 KB |
| 0002-Add-encoding-routines-for-base64-without-whitespace-.patch | application/x-download | 7.0 KB |
| 0003-Refactor-decision-making-of-password-encryption-into.patch | application/x-download | 4.7 KB |
| 0004-Add-clause-PASSWORD-val-USING-protocol-to-CREATE-ALT.patch | application/x-download | 10.0 KB |
| 0005-Support-for-SCRAM-SHA-256-authentication-RFC-5802-an.patch | application/x-download | 97.2 KB |
| 0006-Add-regression-tests-for-passwords.patch | application/x-download | 9.7 KB |
| 0007-Add-TAP-tests-for-authentication-methods.patch | application/x-download | 3.4 KB |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Craig Ringer | 2016-12-07 06:39:47 | Re: WIP: Faster Expression Processing and Tuple Deforming (including JIT) |
| Previous Message | Ashutosh Bapat | 2016-12-07 06:39:01 | Re: Push down more full joins in postgres_fdw |