Re: Re: Proposal for encrypting pg_shadow passwords - Mailing list pgsql-patches

From Tom Lane
Subject Re: Re: Proposal for encrypting pg_shadow passwords
Date
Msg-id 10221.997980570@sss.pgh.pa.us
Whole thread Raw
In response to Re: Re: Proposal for encrypting pg_shadow passwords  (Bruce Momjian <pgman@candle.pha.pa.us>)
Responses Re: Re: Proposal for encrypting pg_shadow passwords
Re: Re: Proposal for encrypting pg_shadow passwords
List pgsql-patches
Bruce Momjian <pgman@candle.pha.pa.us> writes:
> Salt is currently defined as char[2].  Should I encode the rand() as
> char[4] and send that, or skip null and still encode it as char[4].

There's no need to avoid nulls here, AFAICS.  Making the salt a
fixed-length binary string seems like the best bet.

            regards, tom lane

pgsql-patches by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Re: Proposal for encrypting pg_shadow passwords
Next
From: Tom Lane
Date:
Subject: Re: Re: Proposal for encrypting pg_shadow passwords