Thread: Using pgcrypto with AES-256 bits?

Using pgcrypto with AES-256 bits?

From
"Stas Oskin"
Date:

Hello.

 

I tried the pgcrypto contrib module with the AES default encryption. It works pretty nice, but I understand that it's using 128 bit key strength. Is there any built-in support for the 256 bit key strength? Or it should be used via external libraries?

 

AFAIK, the support of mhash and mcrypt was dropped from the recent version of the module, so the AES 256 functionality can be only provided by OpenSSL?

 

Thank you.

 

Stas.

Re: Using pgcrypto with AES-256 bits?

From
Marko Kreen
Date:
On 5/1/05, Stas Oskin <stas@neo.co.il> wrote:
> I tried the pgcrypto contrib module with the AES default encryption. It
> works pretty nice, but I understand that it's using 128 bit key strength. Is
> there any built-in support for the 256 bit key strength? Or it should be
> used via external libraries?

Key will be upward zero-padded to nearest supported key length.
AES supports 3 key lengths: 128, 192 and 256 bits.
So simply give the encrypt() function 256-bit key.

> AFAIK, the support of mhash and mcrypt was dropped from the recent version
> of the module, so the AES 256 functionality can be only provided by OpenSSL?

Builtin AES supports 256-bit keys too.

--
marko