NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commitd880b20

committed

Fix generation of padding message before encrypting Elgamal in pgcrypto

fe0a0b5, which has added a stronger random source in Postgres, hasintroduced a thinko when creating a padding message which gets encryptedfor Elgamal. The padding message cannot have zeros, which are replacedby random bytes. However if pg_strong_random() failed, the messagewould finish by being considered in correct shape for encryption withzeros.Author: Tom LaneReviewed-by: Michael PaquierDiscussion:https://postgr.es/m/20186.1546188423@sss.pgh.pa.usBackpatch-through: 10

1 parent8d3b389 commitd880b20Copy full SHA for d880b20

File tree

1 file changed

-1

lines changed

contrib/pgcrypto
- pgp-pubenc.c

1 file changed

-1

lines changed

`‎contrib/pgcrypto/pgp-pubenc.c`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -66,7 +66,7 @@ pad_eme_pkcs1_v15(uint8 data, int data_len, int res_len, uint8 *res_p)`
`66`	`66`	`{`
`67`	`67`	`px_memset(buf,0,res_len);`
`68`	`68`	`px_free(buf);`
`69`		`-break;`
	`69`	`+returnPXE_NO_RANDOM;`
`70`	`70`	`}`
`71`	`71`	`}`
`72`	`72`	`if (*p!=0)`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commitd880b20

File tree

1 file changed

1 file changed

`‎contrib/pgcrypto/pgp-pubenc.c`

0 commit comments