pgsql: pgcrypto: Remove internal padding implementation

From: Peter Eisentraut <peter(at)eisentraut(dot)org>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: pgcrypto: Remove internal padding implementation
Date: 2022-03-22 08:00:06
Message-ID: E1nWZQz-000pyf-Uc@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

pgcrypto: Remove internal padding implementation

Use the padding provided by OpenSSL instead of doing it ourselves.
The internal implementation was once applicable to the non-OpenSSL
code paths, but those have since been removed. The padding algorithm
is still the same.

The OpenSSL padding implementation is stricter than the previous
internal one: Bad padding during decryption is now an error, and
encryption without padding now requires the input size to be a
multiple of the block size, otherwise it is also an error.
Previously, these cases silently proceeded, in spite of the
documentation saying otherwise.

Add some test cases about this, too. (The test cases are in
rijndael.sql, but they apply to all encryption algorithms.)

Reviewed-by: Jacob Champion <pchampion(at)vmware(dot)com>
Reviewed-by: Nathan Bossart <nathandbossart(at)gmail(dot)com>
Discussion: https://www.postgresql.org/message-id/flat/ba94c26b-0c58-c97e-7a44-f44e08b4cca2%40enterprisedb.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/f5576a21b0778f275d7418f6f7a44d9400ee90aa

Modified Files
--------------
contrib/pgcrypto/expected/rijndael.out | 14 ++++
contrib/pgcrypto/openssl.c | 22 +++---
contrib/pgcrypto/pgp-cfb.c | 4 +-
contrib/pgcrypto/px.c | 120 +--------------------------------
contrib/pgcrypto/px.h | 14 ++--
contrib/pgcrypto/sql/rijndael.sql | 12 ++++
6 files changed, 52 insertions(+), 134 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Dean Rasheed 2022-03-22 10:31:39 pgsql: Add support for security invoker views.
Previous Message Michael Paquier 2022-03-22 04:22:38 pgsql: Fix failures in SSL tests caused by out-of-tree keys and certifi