| From: | "Merlin Moncure" <mmoncure(at)gmail(dot)com> |
|---|---|
| To: | "Pavel Stehule" <pavel(dot)stehule(at)gmail(dot)com> |
| Cc: | "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Alvaro Herrera" <alvherre(at)commandprompt(dot)com>, "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, "Trevor Talbot" <quension(at)gmail(dot)com>, "Roberts, Jon" <Jon(dot)Roberts(at)asurion(dot)com>, "Kris Jurka" <books(at)ejurka(dot)com>, "Jonah H(dot) Harris" <jonah(dot)harris(at)gmail(dot)com>, "Bill Moran" <wmoran(at)collaborativefusion(dot)com>, "pgsql performance" <pgsql-performance(at)postgresql(dot)org>, "Pgsql Hackers" <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: function body actors (was: viewing source code) |
| Date: | 2007-12-21 14:13:32 |
| Message-ID: | b42b73150712210613s1cc85c76p47e6a4bb36257fbe@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers pgsql-performance |
On Dec 21, 2007 3:18 AM, Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> wrote:
> I have similar patch and it works. There is two isues:
>
> * we missing column in pg_proc about state (not all procedures are
> obfuscated), I solved it for plpgsl with using probin.
I was hoping to avoid making any catalog or other changes to support
encryption specifically. Maybe your patch stands on its own
merits...I missed the original discussion. Do you think the code you
wrote can be adapted to do other things besides encryption?
> * decrypt is expensive on language handler level. Every session have
> to do it again and again, better decrypt in system cache or somewhere
> there.
Doesn't bother me in the least...and caching unencrypted data is
scary. Also, aes256 is pretty fast for what it gives you and function
bodies are normally short. The real issue as I see it is where to
keep the key. How did you handle that?
merlin
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2007-12-21 14:25:43 | Re: pgindent issue with EXEC_BACKEND-only typedefs |
| Previous Message | Alvaro Herrera | 2007-12-21 12:18:49 | Re: pgwin32_open returning EINVAL |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2007-12-21 14:34:53 | Re: viewing source code |
| Previous Message | Pavel Stehule | 2007-12-21 08:18:18 | Re: function body actors (was: viewing source code) |