pgsql: Change SHA2 implementation based on OpenSSL to use EVP digest ro

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Change SHA2 implementation based on OpenSSL to use EVP digest ro
Date: 2020-09-28 03:48:12
Message-ID: E1kMk96-0008Gm-7c@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

Change SHA2 implementation based on OpenSSL to use EVP digest routines

The use of low-level hash routines is not recommended by upstream
OpenSSL since 2000, and pgcrypto already switched to EVP as of 5ff4a67.
Note that this also fixes a failure with SCRAM authentication when using
FIPS in OpenSSL, but as there have been few complaints about this
problem and as this causes an ABI breakage, no backpatch is done.

Author: Michael Paquier, Alessandro Gherardi
Reviewed-by: Daniel Gustafsson
Discussion: https://postgr.es/m/20200924025314.GE7405@paquier.xyz
Discussion: https://postgr.es/m/20180911030250.GA27115@paquier.xyz

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/e21cbb4b893b85b5f1cf203b9a77ca0d9ee671d1

Modified Files
--------------
src/common/sha2_openssl.c | 63 ++++++++++++++++++++++++++++++++++++-----------
src/include/common/sha2.h | 10 ++++----
2 files changed, 54 insertions(+), 19 deletions(-)

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Michael Paquier 2020-09-28 07:33:30 __pg_log_level in anonynous enum should be initialized? (Was: pgsql: Change SHA2 implementation based on OpenSSL to use EVP digest ro)
Previous Message Tom Lane 2020-09-28 02:31:05 pgsql: Minor mop-up for List improvements.

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2020-09-28 03:55:06 Re: scram-sha-256 broken with FIPS and OpenSSL 1.0.2
Previous Message Amit Kapila 2020-09-28 03:43:34 Re: New statistics for tuning WAL buffer size