pgsql: pgcrypto: Add support for CFB mode in AES encryption

From: Daniel Gustafsson <dgustafsson(at)postgresql(dot)org>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: pgcrypto: Add support for CFB mode in AES encryption
Date: 2025-02-14 20:29:04
Message-ID: E1tj2J6-0078sM-L2@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

pgcrypto: Add support for CFB mode in AES encryption

Cipher Feedback Mode, CFB, is a self-synchronizing stream cipher which
is very similar to CBC performed in reverse. Since OpenSSL supports it,
we can easily plug it into the existing cipher selection code without
any need for infrastructure changes.

This patch was simultaneously submitted by Umar Hayat and Vladyslav
Nebozhyn, the latter whom suggested the feauture. The committed patch
is Umar's version.

Author: Umar Hayat <postgresql(dot)wizard(at)gmail(dot)com>
Reviewed-by: Daniel Gustafsson <daniel(at)yesql(dot)se>
Reviewed-by: Álvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>
Discussion: https://postgr.es/m/CAPBGcbxo9ASzq14VTpQp3mnUJ5omdgTWUJOvWV0L6nNigWE5jw@mail.gmail.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/9ad1b3d01f369f1b204324857e58d9283ff0a527

Modified Files
--------------
contrib/pgcrypto/expected/rijndael.out | 118 +++++++++++++++++++++++++++++++++
contrib/pgcrypto/openssl.c | 39 +++++++++++
contrib/pgcrypto/sql/rijndael.sql | 53 +++++++++++++++
doc/src/sgml/pgcrypto.sgml | 8 ++-
4 files changed, 217 insertions(+), 1 deletion(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Melanie Plageman 2025-02-14 20:29:07 Re: pgsql: Use streaming read I/O in VACUUM's third phase
Previous Message Nathan Bossart 2025-02-14 18:58:46 pgsql: Use PqMsg_Progress macro in HandleParallelMessage().