Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bpKBu-0000n1-6p for pgsql-hackers@arkaria.postgresql.org; Wed, 28 Sep 2016 19:06:50 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1bpKBt-0004MC-Q0 for pgsql-hackers@arkaria.postgresql.org; Wed, 28 Sep 2016 19:06:49 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bpKBr-0004I1-Na for pgsql-hackers@postgresql.org; Wed, 28 Sep 2016 19:06:47 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bpKBo-0008Su-M4 for pgsql-hackers@postgresql.org; Wed, 28 Sep 2016 19:06:46 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id 88E805F79A; Wed, 28 Sep 2016 15:06:43 -0400 (EDT) Date: Wed, 28 Sep 2016 15:06:43 -0400 From: Stephen Frost To: Michael Paquier Cc: Heikki Linnakangas , David Steele , Tom Lane , Robert Haas , David Fetter , Alvaro Herrera , Magnus Hagander , Peter Eisentraut , Julian Markwort , PostgreSQL mailing lists , Valery Popov Subject: Re: Password identifiers, protocol aging and SCRAM protocol Message-ID: <20160928190643.GY5148@tamriel.snowman.net> References: <47be24f5-12a5-7af8-efc0-9486a7dbd413@iki.fi> <4709913e-639f-6696-da82-0ea18a3444c4@iki.fi> <8d025718-e579-261b-9513-a53265fd2932@iki.fi> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="HSVPcR81XVhxeM7P" Content-Disposition: inline In-Reply-To: X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.13.0-91-generic (x86_64) X-Uptime: 15:03:17 up 81 days, 20:27, 16 users, load average: 0.13, 0.09, 0.06 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -4.9 (----) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --HSVPcR81XVhxeM7P Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Heikki, Michael, Magnus, * Michael Paquier (michael.paquier@gmail.com) wrote: > On Tue, Sep 27, 2016 at 10:42 PM, Heikki Linnakangas wr= ote: > > The libpq-side is not. Just calling random() won't do. We haven't neede= d for > > random numbers in libpq before, but now we do. Is the pgcrypto solution > > portable enough that we can use it in libpq? >=20 > Do you think that urandom would be enough then? The last time I took a > look at that, I saw urandom on all modern platforms even those ones: > OpenBSD, NetBSD, Solaris, SunOS. For Windows the CryptGen stuff would > be nice enough I guess.. Magnus had been working on a patch that, as I recall, he thought was portable and I believe could be used on both sides. Magnus, would what you were working on be helpful here...? Thanks! Stephen --HSVPcR81XVhxeM7P Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJX7BTDAAoJEO1sijiDR2RVb7YP/2mZG/9HwIfEqehJu6Z/wOl5 7RBqiIpdBOqICyqRaOjDGgV2m4FXH8IGYMJwhQj8h3iv7t4GK32dyShYWJuYmfYM nLjDcq540Z9BNVHRQAwlWcs7qMcdbVq5iLeyQT5cR+9LNCnuE3J0+26l43Vvd0Yf TeeCwtyN0qnUQGp3YkSK92tJEUGCnGSxTTZS5qR8Xj544qbTY0wwkTkOV5ZYv9zP MU/m9U4FceirOuwVixczFU0K4XArXs6587xpBdJtJVsPg8BvFMHBYaLdOLVghJtb lXYPr4qoUVObOsRDscYeutRum9KeHmZf2KM2XCRxYpEaZNXtR/W2WhMTBkYDo+Fi puOkYFUoQz/DGoiSM47Bi6R8RcrBKar3+axv/UiYz6qBHhz3uGPqhaLfbmZswm+7 /W8kEjU0n++JNgDoRkiIHxpSLZ4nl8VCOTluLXF11C1R+dfk/mDM3KJSL8ND7TwC cVNCO9Ni6A2XfuQTs3UHhiNqJWjH972Z6mTrC/sHrRn+mwu9eUUAg1xWnPP779Gz ztKfkeaH5b4gm5WmfsZh0pAbhmSJlQ6cgkdCMh58yTlbPAC3tzzzr2fu1c1dyk7X oEa+Q1i9yrdJgCea+cHVCB3BlnIoJvwKO0ZGrqu654LYfdx0ICw8s1dWjIjLob00 Bof401+RAG9y/B4Ewmyq =YqOD -----END PGP SIGNATURE----- --HSVPcR81XVhxeM7P--