Re: storing an explicit nonce - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: storing an explicit nonce
Date
Msg-id 20210525212304.GN20766@tamriel.snowman.net
Whole thread Raw
In response to Re: storing an explicit nonce  (Bruce Momjian <bruce@momjian.us>)
List pgsql-hackers
Greetings,

* Bruce Momjian (bruce@momjian.us) wrote:
> On Tue, May 25, 2021 at 05:14:24PM -0400, Stephen Frost wrote:
> > * Bruce Momjian (bruce@momjian.us) wrote:
> > > Yes, I can see that happening.  I think occasional leakage of hint bit
> > > changes to be acceptable.  We might decide they are all acceptable.
> >
> > I don't think that I agree with the idea that this would ultimately only
> > leak the hint bits- I'm fairly sure that this would make it relatively
> > trivial for an attacker to be able to deduce the contents of the entire
> > 8k page.  I don't know that we should be willing to accept that as a
> > part of regular operation (which we generally view crashes as being).  I
> > had thought there was something in place to address this though.  If
> > not, it does seem like there should be.
>
> Uh, can you please explain more?  Would the hint bits leak?  In another
> email you said hint bit leaking was OK.

See my recent email, think I clarified it well over there.

Thanks,

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: storing an explicit nonce
Next
From: Stephen Frost
Date:
Subject: Re: storing an explicit nonce