Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p4k6D-0007RC-5r for pgsql-hackers@arkaria.postgresql.org; Mon, 12 Dec 2022 14:48:09 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1p4k6B-0006yG-1u for pgsql-hackers@arkaria.postgresql.org; Mon, 12 Dec 2022 14:48:07 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p4k6A-0006xy-LS for pgsql-hackers@lists.postgresql.org; Mon, 12 Dec 2022 14:48:06 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p4k68-0005pK-0z for pgsql-hackers@lists.postgresql.org; Mon, 12 Dec 2022 14:48:05 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:In-Reply-To:Subject:From: References:Cc:To:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=ykxYWQx6MSI/5Pk5rp+jEsiDIpwAi+8rHk2/vN/DZms=; b=UoNK/IDmP9rKfPKfFi08IyddK9 PXcbODgVwyNAaa4cTjws5COTu23c64mwFA/tcNc/cesZWAHd6D7pQL1YpXg3a+LikydOG2Atnovnw N5M9sJcdY3asgoQUSJyK7WjUrbe3SfPuprt4i0LYjeUUfSf06uJ8GgOLB0eXvwAEwFTTaOvkj1gsR mEIUI0xoJjbWiUM9z6ZFS9GuHjA/Bh1J85/ZUR1pqzOcFuBog0vcPYM4tJuqRnp6Za5/m7ECWUepA yh3d5NPTtrSNa69boAzWXACTrCjls8k8yBHOlcDjOoiJyc0sAkM1CIw0A7hE4LAi04NCyWnzQBVYJ VB5dtwVQ==; Received: from [52.119.84.106] (helo=[192.168.88.177]) by meldrar.postgresql.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1p4k61-0001rP-Mk; Mon, 12 Dec 2022 14:48:00 +0000 Message-ID: <4880738a-cbf7-c9a1-4faf-ba861c731c63@postgresql.org> Date: Mon, 12 Dec 2022 09:47:56 -0500 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.5.1 Content-Language: en-US To: Andres Freund , Daniel Gustafsson Cc: PostgreSQL Hackers References: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> From: "Jonathan S. Katz" Subject: Re: Raising the SCRAM iteration count In-Reply-To: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------0FDJ1GnmynOtsYAP8cphhvEt" X-Host-Lookup-Failed: Reverse DNS lookup failed for 52.119.84.106 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------0FDJ1GnmynOtsYAP8cphhvEt Content-Type: multipart/mixed; boundary="------------FLiYNwSGlIaoUzZjFeZ4Wc6E"; protected-headers="v1" From: "Jonathan S. Katz" To: Andres Freund , Daniel Gustafsson Cc: PostgreSQL Hackers Message-ID: <4880738a-cbf7-c9a1-4faf-ba861c731c63@postgresql.org> Subject: Re: Raising the SCRAM iteration count References: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> In-Reply-To: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> --------------FLiYNwSGlIaoUzZjFeZ4Wc6E Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTIvOS8yMiA3OjE1IFBNLCBBbmRyZXMgRnJldW5kIHdyb3RlOg0KPiBIaSwNCj4gDQo+ IE9uIDIwMjItMTItMDkgMTE6NTU6MDcgKzAxMDAsIERhbmllbCBHdXN0YWZzc29uIHdyb3Rl Og0KPj4gT3VyIGN1cnJlbnQgaGFyZGNvZGVkIHZhbHVlIGZvciBpdGVyYXRpb24gY291bnQg aXMgNDA5Niwgd2hpY2ggaXMgYmFzZWQgb24gYQ0KPj4gcmVjb21tZW5kYXRpb24gZnJvbSBS RkMgNzY3Ny4gIFRoaXMgaXMgaG93ZXZlciB0aGUgbG93ZXIgZW5kIG9mIHRoZSBzY2FsZSwg YW5kDQo+PiBpcyByZWxhdGVkIHRvIGNvbXB1dGluZyBwb3dlciBpbiAyMDE1IGdlbmVyYXRp b24gaGFuZGhlbGQgZGV2aWNlcy4gIFRoZQ0KPj4gcmVsZXZhbnQgcGFyYWdyYXBoIGluIHNl Y3Rpb24gNCBvZiBSRkMgNzY3NyBbMV0gcmVhZHM6DQo+Pg0KPj4gICAgICJBcyBhIHJ1bGUg b2YgdGh1bWIsIHRoZSBoYXNoIGl0ZXJhdGlvbi1jb3VudCBzaG91bGQgYmUgc3VjaCB0aGF0 IGEgbW9kZXJuDQo+PiAgICAgbWFjaGluZSB3aWxsIHRha2UgMC4xIHNlY29uZHMgdG8gcGVy Zm9ybSB0aGUgY29tcGxldGUgYWxnb3JpdGhtOyBob3dldmVyLA0KPj4gICAgIHRoaXMgaXMg dW5saWtlbHkgdG8gYmUgcHJhY3RpY2FsIG9uIG1vYmlsZSBkZXZpY2VzIGFuZCBvdGhlciBy ZWxhdGl2ZWx5IGxvdy0NCj4+ICAgICBwZXJmb3JtYW5jZSBzeXN0ZW1zLiAgQXQgdGhlIHRp bWUgdGhpcyB3YXMgd3JpdHRlbiwgdGhlIHJ1bGUgb2YgdGh1bWIgZ2l2ZXMNCj4+ICAgICBh cm91bmQgMTUsMDAwIGl0ZXJhdGlvbnMgcmVxdWlyZWQ7IGhvd2V2ZXIsIGEgaGFzaCBpdGVy YXRpb24tIGNvdW50IG9mIDQwOTYNCj4+ICAgICB0YWtlcyBhcm91bmQgMC41IHNlY29uZHMg b24gY3VycmVudCBtb2JpbGUgaGFuZHNldHMuIg0KPj4NCj4+IEl0IGdvZXMgb24gdG8gc2F5 Og0KPj4NCj4+ICAgICAiLi50aGUgcmVjb21tZW5kYXRpb24gb2YgdGhpcyBzcGVjaWZpY2F0 aW9uIGlzIHRoYXQgdGhlIGhhc2ggaXRlcmF0aW9uLSBjb3VudA0KPj4gICAgIFNIT1VMRCBi ZSBhdCBsZWFzdCA0MDk2LCBidXQgY2FyZWZ1bCBjb25zaWRlcmF0aW9uIG91Z2h0IHRvIGJl IGdpdmVuIHRvDQo+PiAgICAgdXNpbmcgYSBzaWduaWZpY2FudGx5IGhpZ2hlciB2YWx1ZSwg cGFydGljdWxhcmx5IHdoZXJlIG1vYmlsZSB1c2UgaXMgbGVzcw0KPj4gICAgIGltcG9ydGFu dC4iDQo+Pg0KPj4gU2VsZWN0aW5nIDQwOTYgd2FzIHRodXMgYSBjb25zZXJ2YXRpdmUgdGFr ZSBhbHJlYWR5IGluIDIwMTUsIGFuZCBpcyBub3cgdmVyeQ0KPj4gbXVjaCBzby4gIE9uIG15 IDIwMjAtdmludGFnZSBNYWNib29rIEkgbmVlZCB+MjAwayBpdGVyYXRpb25zIHRvIGNvbnN1 bWUgMC4xDQo+PiBzZWNvbmRzIChpbiBhIGJ1aWxkIHdpdGggYXNzZXJ0aW9ucykuICBDYWxj dWxhdGluZyB0ZW5zIG9mIHRob3VzYW5kcyBvZiBoYXNoZXMNCj4+IHBlciBzZWNvbmQgb24g YSBjb25zdW1lciBsYXB0b3AgYXQgYSA0MDk2IGl0ZXJhdGlvbiBjb3VudCBpcyBubyBzdHJl dGNoLiAgQQ0KPj4gYnJpZWYgbG9vayBzaG93cyB0aGF0IE1vbmdvREIgaGFzIGEgbWluaW11 bSBvZiA1MDAwIHdpdGggYSBkZWZhdWx0IG9mIDE1MDAwDQo+PiBbMl07IEthZmthIGhhcyBh IG1pbmltdW0gb2YgNDA5NiBbM10uDQo+Pg0KPj4gTWFraW5nIHRoZSBpdGVyYXRpb24gY291 bnQgYSBjb25maWd1cmFibGUgc2V0dGluZyB3b3VsZCBhbGxvdyBpbnN0YWxsYXRpb25zIHRv DQo+PiByYWlzZSB0aGUgaXRlcmF0aW9uIGNvdW50IHRvIHN0cmVuZ3RoZW4gYWdhaW5zdCBi cnV0ZSBmb3JjZSBhdHRhY2tzLCB3aGlsZQ0KPj4gc3RpbGwgc3VwcG9ydGluZyB0aG9zZSB3 aXRoIGxvd2VyIGVuZCBjbGllbnRzIHdobyBwcmVmZXIgdGhlIHRyYWRlLW9mZiBvZg0KPj4g c2hvcnRlciBhdXRoZW50aWNhdGlvbiB0aW1lcy4NCj4+DQo+PiBUaGUgYXR0YWNoZWQgaW50 cm9kdWNlcyBhIHNjcmFtX2l0ZXJhdGlvbl9jb3VudCBHVUMgd2l0aCBhIGRlZmF1bHQgb2Yg MTUwMDANCj4+IChzdGlsbCBjb25zZXJ2YXRpdmUsIGZyb20gUkZDNzY3NykgYW5kIGEgbWlu aW11bSBvZiA0MDk2LiAgU2luY2UgdGhlIGl0ZXJhdGlvbnMNCj4+IGFyZSBzdG9yZWQgcGVy IHNlY3JldCBpdCBjYW4gYmUgYWx0ZXJlZCB3aXRoIGJhY2t3YXJkcyBjb21wYXRpYmlsaXR5 Lg0KDQpUbyB0aHJvdyBvbiBhIGJpdCBvZiBwYWludCwgaWYgd2UgZG8gY2hhbmdlIGl0LCB3 ZSBzaG91bGQgbGlrZWx5IGZvbGxvdyANCndoYXQgd291bGQgY29tZSBvdXQgaW4gYSBSRkMu DQoNCldoaWxlIHRoZSBTQ1JBTS1TSEEtNTEyIFJGQyBpcyBzdGlsbCBpbiBkcmFmdFsxXSwg dGhlIGxhdGVzdCBkcmFmdCBpdCANCmNvbnRhaW5zIGEgIlNIT1VMRCIgcmVjb21tZW5kYXRp b24gb2YgMTAwMDAsIHdoaWNoIHdhcyBidW1wZWQgdXAgZnJvbSANCjQwOTYgaW4gYW4gZWFy bGllciB2ZXJzaW9uIG9mIHRoZSBkcmFmdDoNCg0KPT1zbmlwPT0NClRoZXJlZm9yZSwgdGhl IHJlY29tbWVuZGF0aW9uIG9mIHRoaXMgc3BlY2lmaWNhdGlvbiBpcyB0aGF0IHRoZSBoYXNo IA0KaXRlcmF0aW9uLSBjb3VudCBTSE9VTEQgYmUgYXQgbGVhc3QgMTAwMDAsIGJ1dCBjYXJl ZnVsIGNvbnNpZGVyYXRpb24gDQpvdWdodCB0byBiZSBnaXZlbiB0byB1c2luZyBhIHNpZ25p ZmljYW50bHkgaGlnaGVyIHZhbHVlLCBwYXJ0aWN1bGFybHkgDQp3aGVyZSBtb2JpbGUgdXNl IGlzIGxlc3MgaW1wb3J0YW50LsK2DQo9PXNuaXA9PQ0KDQpJJ20gY3VycmVudGx5IGFtYml2 YWxlbnQgKCswKSBvbiBjaGFuZ2luZyB0aGUgZGVmYXVsdC4gSSB0aGluayBnaXZpbmcgDQp0 aGUgdXNlciBtb3JlIGNvbnRyb2wgb3ZlciBpdGVyYXRpb25zIChbMl0sIGFuZCBmb2xsb3cg dXAgd29yayB0byBtYWtlIA0KaXQgZWFzaWVyIHRvIHNldCBpdGVyYXRpb24gYWNjb3VudCB2 aWEgY2xpZW50KSBjYW4gaGVscCB3aXRoIHRoaXMuDQoNCkhvd2V2ZXIsIEkgZG8gbGlrZSB0 aGUgaWRlYSBvZiBhIEdVQy4NCg0KPiBJIGFtIGV4dHJlbWVseSBkb3VidGZ1bCBpdCdzIGEg Z29vZCBpZGVhIHRvIGluY3JlYXNlIHRoZSBkZWZhdWx0IChpZiBhbnl0aGluZw0KPiB0aGUg b3Bwb3NpdGUpLiAwLjEgc2Vjb25kcyBpcyBtYW55IHRpbWVzIHRoZSBjb25uZWN0aW9uIGVz dGFibGlzaG1lbnQNCj4gb3ZlcmhlYWQsIGV2ZW4gb3ZlciBuZXR3b3JrLiAgSSd2ZSBzZWVu IHVzZXJzIGNvbXBsYWluIGFib3V0IHBvc3RncmVzDQo+IGNvbm5lY3Rpb24gZXN0YWJsaXNo bWVudCBvdmVyaGVhZCBiZWluZyBoaWdoLCBhbmQgaXQganVzdCB0dXJuZWQgb3V0IHRvIGJl IGR1ZQ0KPiB0byBzY3JhbSAtIHllcywgdGhleSBlbmRlZCB1cCBzd2l0Y2hpbmcgdG8gbWQ1 LCBiZWNhdXNlIHRoYXQgd2FzIHRoZSBvbmx5DQo+IHZpYWJsZSBhbHRlcm5hdGl2ZS4NCg0K VWdoLCBJJ2QgYmUgY3VyaW91cyB0byBrbm93IGhvdyBvZnRlbiB0aGF0IGlzIHRoZSBjYXNl LiBUaGF0IHNhaWQsIEkgDQp0aGluayBzb21lIG9mIHRoZSBhYm92ZSB3b3JrIGNvdWxkIGhl bHAgd2l0aCB0aGF0Lg0KDQpUaGFua3MsDQoNCkpvbmF0aGFuDQoNClsxXSBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LW1lbG5pa292LXNjcmFtLXNoYS01 MTINClsyXSBodHRwczovL3Bvc3Rnci5lcy9tL2ZjZTcyMjhlLWQwZDYtNjRhMS0zZGNiLWJi YTg1YzJmYWM4NUBwb3N0Z3Jlc3FsLm9yZy8NCg== --------------FLiYNwSGlIaoUzZjFeZ4Wc6E-- --------------0FDJ1GnmynOtsYAP8cphhvEt Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE+oS2la8r95ogZD/x8QSccp8cZScFAmOXPxwFAwAAAAAACgkQ8QSccp8cZSf4 Ug//YY9jr+4YK3GOSCxANJLXR8aIY8AiK8zJBSWnPOmFleHLl+sL92kYZ11UkQTpydxsfQNoKWyI CfnRFPEPz6ZOxEmoXS/ySPsz/yNn7YhMQ/V5rJbfZs2aRUO8VYYrJB9MkWLqPpNuVfHNl2Y6J/8x X1tpqYGENE7xuEF38+jeH6uSRVh4ji13taLVggPnUGdIh0HhGLSXff1Omv/v76w/yTPhLcd3on5p ljyLI2ssOgbbWOzBcPY0ue/yolbbAB+qzZEVFs56Ymca4+3mqYYSCnOYNSkzV0IQFhBzePyJvPa1 lubqpHXSOW/OZQnnVCzp84Gkgr1kIwLLMORMX7tcdtc9i7iFiCMp7EKql7V5vnGW4aIfKMEXeVBg VaKUTcsGWZYrjiZZ91W+/ekEm6qVkRdfytdmCqI0UfAd4s3CnamoLdac8LgvPRp5GLjegHLRcX47 o+KMrcGdzA43SXPqpjbKkXRWwbNBL75+I0u53xgzirWylLgWmRKbNN8Uz+tqhGZbpUF8337bdQmD rBTQJ1J/qEckk9k3U9fLkGRLRpCcps21VqglBT8sNzHxORcTNiiP3Jtn/SG/eq5CwBYcZTDWTf5U S8TdZpK7AdidFxQ7IGV69k0jBqRhKWAtcy/i21U+nHdLR4SqJr0lUhv4tV6aBjze0QInJEomwJ0O G8I= =N9FZ -----END PGP SIGNATURE----- --------------0FDJ1GnmynOtsYAP8cphhvEt--