Skip site navigation (1) Skip section navigation (2)

Re: function body actors (was: viewing source code)

From: "Merlin Moncure" <mmoncure(at)gmail(dot)com>
To: "Pavel Stehule" <pavel(dot)stehule(at)gmail(dot)com>
Cc: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Alvaro Herrera" <alvherre(at)commandprompt(dot)com>, "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, "Trevor Talbot" <quension(at)gmail(dot)com>, "Roberts, Jon" <Jon(dot)Roberts(at)asurion(dot)com>, "Kris Jurka" <books(at)ejurka(dot)com>, "Jonah H(dot) Harris" <jonah(dot)harris(at)gmail(dot)com>, "Bill Moran" <wmoran(at)collaborativefusion(dot)com>, "pgsql performance" <pgsql-performance(at)postgresql(dot)org>, "Pgsql Hackers" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: function body actors (was: viewing source code)
Date: 2007-12-21 14:13:32
Message-ID: b42b73150712210613s1cc85c76p47e6a4bb36257fbe@mail.gmail.com (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-performance
On Dec 21, 2007 3:18 AM, Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> wrote:
> I have similar patch and it works. There is two isues:
>
> * we missing column in pg_proc about state (not all procedures are
> obfuscated), I solved it for plpgsl with using probin.

I was hoping to avoid making any catalog or other changes to support
encryption specifically.  Maybe your patch stands on its own
merits...I missed the original discussion.  Do you think the code you
wrote can be adapted to do other things besides encryption?

> * decrypt is expensive on language handler level. Every session have
> to do it again and again, better decrypt in system cache or somewhere
> there.

Doesn't bother me in the least...and caching unencrypted data is
scary.  Also, aes256 is pretty fast for what it gives you and function
bodies are normally short.  The real issue as I see it is where to
keep the key.  How did you handle that?

merlin

In response to

Responses

pgsql-performance by date

Next:From: Bruce MomjianDate: 2007-12-21 14:34:53
Subject: Re: viewing source code
Previous:From: Pavel StehuleDate: 2007-12-21 08:18:18
Subject: Re: function body actors (was: viewing source code)

pgsql-hackers by date

Next:From: Bruce MomjianDate: 2007-12-21 14:25:43
Subject: Re: pgindent issue with EXEC_BACKEND-only typedefs
Previous:From: Alvaro HerreraDate: 2007-12-21 12:18:49
Subject: Re: pgwin32_open returning EINVAL

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group