Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p5WyL-000883-C6 for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Dec 2022 18:59:17 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1p5WyK-000387-8A for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Dec 2022 18:59:16 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p5WyJ-00037x-Pk for pgsql-hackers@lists.postgresql.org; Wed, 14 Dec 2022 18:59:15 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p5WyH-0007yJ-3Z for pgsql-hackers@lists.postgresql.org; Wed, 14 Dec 2022 18:59:14 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:In-Reply-To:Subject:From: References:Cc:To:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=3mZjHFJl6PABYULNYVIjqJMK9ou85WUc9tqduiGnlGk=; b=YMx4UW3+huSnnMyMwAbSzS8RDJ PTSeN4s2XFBz5Oc4A5V8mF+MLK2X3dpqtbJppMRTQia1pV3DEh8AlVzpAH4rWmRuP8/3PlWJq7kRT 21Zz2pNjNS1lH1wbbq243+vMajEAc6An3OKE9OfhKjmiTfHH7aeA0Xo5JQRkTfOCqlKdujALs3Q5/ D/QicHC3EhiuPYDDLpw4KZM9/leSvHZiNrZFWok6QMDXSap8pNJibMvFtZKQwmkqFjeelYiLa5nOb QkuLO/HOy3SgfwZoTJzImy6uultbTEBeKfJyQ2K/RcuejnSuWQ/wvRWA18jy3oF+pL5LDE2vzFmMQ sycWD5ZQ==; Received: from [52.119.84.106] (helo=[192.168.88.177]) by meldrar.postgresql.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1p5WyA-0007Ch-HG; Wed, 14 Dec 2022 18:59:09 +0000 Message-ID: <869f3aee-5c46-998d-be42-b3b232415bef@postgresql.org> Date: Wed, 14 Dec 2022 13:59:04 -0500 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.5.1 Content-Language: en-US To: Daniel Gustafsson , Michael Paquier Cc: Andres Freund , PostgreSQL Hackers References: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> <4880738a-cbf7-c9a1-4faf-ba861c731c63@postgresql.org> <75619A47-4CD0-4E0F-8A30-32F83FF593DD@yesql.se> From: "Jonathan S. Katz" Subject: Re: Raising the SCRAM iteration count In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------ym4o7aGNn5xckaeWxNJ0U4R7" X-Host-Lookup-Failed: Reverse DNS lookup failed for 52.119.84.106 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------ym4o7aGNn5xckaeWxNJ0U4R7 Content-Type: multipart/mixed; boundary="------------fWnd8pQ0BHiGEfM7kAPO4FyV"; protected-headers="v1" From: "Jonathan S. Katz" To: Daniel Gustafsson , Michael Paquier Cc: Andres Freund , PostgreSQL Hackers Message-ID: <869f3aee-5c46-998d-be42-b3b232415bef@postgresql.org> Subject: Re: Raising the SCRAM iteration count References: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> <4880738a-cbf7-c9a1-4faf-ba861c731c63@postgresql.org> <75619A47-4CD0-4E0F-8A30-32F83FF593DD@yesql.se> In-Reply-To: --------------fWnd8pQ0BHiGEfM7kAPO4FyV Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTIvMTQvMjIgNjoyNSBBTSwgRGFuaWVsIEd1c3RhZnNzb24gd3JvdGU6DQo+PiBPbiAx NCBEZWMgMjAyMiwgYXQgMDI6MDAsIE1pY2hhZWwgUGFxdWllciA8bWljaGFlbEBwYXF1aWVy Lnh5ej4gd3JvdGU6DQo+Pg0KPj4gT24gVHVlLCBEZWMgMTMsIDIwMjIgYXQgMTI6MTc6NThQ TSArMDEwMCwgRGFuaWVsIEd1c3RhZnNzb24gd3JvdGU6DQo+Pj4gSXQgZG9lcyByYWlzZSBh biBpbnRlcmVzdGluZyBwb2ludCB0aG91Z2gsIGlmIHdlIGluIHRoZSBmdXR1cmUgYWRkIHN1 cHBwcnQgZm9yDQo+Pj4gU0NSQU0tU0hBLTUxMiAod2hpY2ggc2VlbXMgcmVhc29uYWJsZSB0 byBkbykgaXQncyBub3QgZ29vZCBlbm91Z2ggdG8gaGF2ZSBhDQo+Pj4gc2luZ2xlIEdVQyBm b3IgU0NSQU0gaXRlcmF0aW9uczsgd2UnZCBuZWVkIHRvIGJlIGFibGUgdG8gc2V0IHRoZSBp dGVyYXRpb24NCj4+PiBjb3VudCBwZXIgYWxnb3JpdGhtLiBJJ2xsIGFjY291bnQgZm9yIHRo YXQgd2hlbiB1cGRhdGluZyB0aGUgcGF0Y2ggZG93bnRocmVhZC4NCj4+DQo+PiBTbywgeW91 IG1lYW4gdGhhdCB0aGUgR1VDIHNob3VsZCBiZSBuYW1lZCBsaWtlIHBhc3N3b3JkX2l0ZXJh dGlvbnMsDQo+PiB0YWtpbmcgYSBncmFtbWFyIHdpdGggYSBsaXN0IGxpa2UgJ3NjcmFtLXNo YS0yNTY9NDA5NixhbGdvMj01MDAwJz8NCj4gDQo+IEkgd2FzIHRoaW5raW5nIGFib3V0IGl0 IGJ1dCBvcHRlZCBmb3IgdGhlIHNpbXBsZXIgYXBwcm9hY2ggb2YgYSBHVUMgbmFtZSB3aXRo DQo+IHRoZSBhbGdvcml0aG0gYmFrZWQgaW50byBpdDogc2NyYW1fc2hhMjU2X2l0ZXJhdGlv bnMuICBJdCBkb2Vzbid0IHNlZW0gYWxsIHRoYXQNCj4gbGlrZWx5IHRoYXQgd2UnbGwgaGF2 ZSBtb3JlIHRoYW4gdHdvIHZlcnNpb25zIG9mIFNDUkFNIChzaGEyNTYvc2hhNTEyKSBzbw0K PiB0aGUgYWRkaXRpb25hbCBjb21wbGV4aXR5IGRvZXNuJ3Qgc2VlbSB3b3J0aCBpdC4NCg0K SSB3b3VsZCBub3QgcnVsZSB0aGlzIG91dC4gVGhlcmUgaXMgYSBSRkMgZHJhZnQgZm9yIFND UkFNLVNIQTMtNTEyWzFdLg0KDQpJIGRvIGhhdmUgbWl4ZWQgZmVlbGluZ3Mgb24gdGhlICd4 MT15MSx4Mj15Micgc3R5bGUgR1VDLCBidXQgd2UgZG8gaGF2ZSANCm1hY2hpbmVyeSB0byBo YW5kbGUgaXQgYW5kIGl0IGdpdmVzIGEgYml0IG1vcmUgZmxleGliaWxpdHkgb3ZlciBob3cg bWFueSANClNDUkFNIGhhc2ggbWV0aG9kcyBnZXQgYWRkZWQuIEknZCBsaWtlIHRvIGhlYXIg bW9yZSBmZWVkYmFjay4NCg0KKEkgZG9uJ3Qga25vdyBpZiB0aGVyZSB3aWxsIGJlIGEgd29y bGQgaWYgd2UgZXZlciBsZXQgdXNlcnMgQllPLWhhc2gsIA0KYnV0IHRoYXQgY2FzZSBtYXkg Zm9yY2Ugc2VwYXJhdGUgR1VDcyBhbnl3YXkpLg0KDQpbMV0gaHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtbWVsbmlrb3Ytc2NyYW0tc2hhMy01MTIvDQoNCj4gVGhl IGF0dGFjaGVkIHYyIGhhcyB0aGUgR1VDIHJlbmFtZSBhbmQgYSBjaGFuZ2UgdG8gR1VDX1JF UE9SVCBzdWNoIHRoYXQgdGhlDQo+IGZyb250ZW5kIGNhbiB1c2UgdGhlIHJlYWwgdmFsdWUg cmF0aGVyIHRoYW4gdGhlIGRlZmF1bHQuICBJIGtlcHQgaXQgZm9yIHN1cGVyDQo+IHVzZXJz IHNvIGZhciwgZG8geW91IHRoaW5rIGl0IHNob3VsZCBiZSBhIHVzZXIgc2V0dGluZyBiZWlu ZyBzb21ld2hhdCBzZW5zaXRpdmU/DQoNCk5vLCBiZWNhdXNlIGEgdXNlciBjYW4gc2V0IHRo ZSBudW1iZXIgb2YgaXRlcmF0aW9ucyB0b2RheSBpZiB0aGV5IGJ1aWxkIA0KdGhlaXIgb3du IFNDUkFNIHNlY3JldC4gSSB0aGluayBpdCdzIE9LIGlmIHRoZXkgY2hhbmdlIGl0IGluIGEg c2Vzc2lvbi4NCg0KSWYgYSBzdXBlcnVzZXIgd2FudHMgdG8gZW5mb3JjZSBhIG1pbmltdW0g aXRlcmF0aW9uIGNvdW50LCB0aGV5IGNhbiANCndyaXRlIGEgcGFzc3dvcmRfY2hlY2tfaG9v ay4gKE9yIHdlIGNvdWxkIGFkZCBhbm90aGVyIEdVQyB0byBlbmZvcmNlIHRoYXQpLg0KDQo+ IFRoZSBkZWZhdWx0IGluIHRoaXMgdmVyc2lvbiBpcyByb2xsZWQgYmFjayB0byA0MDk2IGFz IHRoZXJlIHdhcyBwdXNoYmFjaw0KPiBhZ2FpbnN0IHJhaXNpbmcgaXQsIGFuZCB0aGUgbG93 ZXIgbGltaXQgaXMgb25lIGluIG9yZGVyIHRvIHBvdGVudGlhbGx5IGFzc2lzdA0KPiBzaXR1 YXRpb25zIGxpa2UgdGhlIG9uZSBBbmRyZXMgbWVudGlvbmVkIHdoZXJlIG1kNSBpcyB1c2Vk Lg0KDQpSZXZpZXdpbmcgcGF0Y2ggYXMgaXMuDQoNClN1Z2dlc3Rpb24gb24gdGV4dDoNCg0K PT1zbmlwPT0NClRoZSBudW1iZXIgb2YgY29tcHV0YXRpb25hbCBpdGVyYXRpb25zIHRvIHBl cmZvcm0gd2hlbiBnZW5lcmF0aW5nDQphIFNDUkFNLVNIQS0yNTYgc2VjcmV0LiBUaGUgZGVm YXVsdCBpcyA8bGl0ZXJhbD40MDk2PC9saXRlcmFsPi4gQQ0KaGlnaGVyIG51bWJlciBvZiBp dGVyYXRpb25zIHByb3ZpZGVzIGFkZGl0aW9uYWwgcHJvdGVjdGlvbiBhZ2FpbnN0DQpicnV0 ZS1mb3JjZSBhdHRhY2tzIG9uIHN0b3JlZCBwYXNzd29yZHMsIGJ1dCBtYWtlcyBhdXRoZW50 aWNhdGlvbg0Kc2xvd2VyLiBDaGFuZ2luZyB0aGUgdmFsdWUgaGFzIG5vIGVmZmVjdCBvbiBw cmV2aW91c2x5IGNyZWF0ZWQNClNDUkFNLVNIQS0yNTYgc2VjcmV0cyBhcyB0aGUgaXRlcmF0 aW9uIGNvdW50IGF0IHRoZSB0aW1lIG9mIGNyZWF0aW9uDQppcyBmaXhlZC4gQSBwYXNzd29y ZCBtdXN0IGJlIHJlLWhhc2hlZCB0byB1c2UgYW4gdXBkYXRlZCBpdGVyYXRpb24NCnZhbHVl Lg0KPT1zbmlwPT0NCg0KICAvKg0KLSAqIERlZmF1bHQgbnVtYmVyIG9mIGl0ZXJhdGlvbnMg d2hlbiBnZW5lcmF0aW5nIHNlY3JldC4gIFNob3VsZCBiZSBhdCBsZWFzdA0KLSAqIDQwOTYg cGVyIFJGQyA3Njc3Lg0KKyAqIERlZmF1bHQgbnVtYmVyIG9mIGl0ZXJhdGlvbnMgd2hlbiBn ZW5lcmF0aW5nIHNlY3JldC4NCiAgICovDQoNCkkgZG9uJ3QgdGhpbmsgd2Ugc2hvdWxkIHJl bW92ZSB0aGUgUkZDIDc2NzcgcmVmZXJlbmNlIGVudGlyZWx5LiBQZXJoYXBzOg0KDQovKg0K ICAqIERlZmF1bHQgbnVtYmVyIG9mIGl0ZXJhdGlvbnMgd2hlbiBnZW5lcmF0aW5nIHNlY3Jl dC4gUkZDIDc2NzcNCiAgKiByZWNvbW1lbmQgNDA5NiBmb3IgU0NSQU0tU0hBLTI1Niwgd2hp Y2ggd2Ugc2V0IGFzIHRoZSBkZWZhdWx0LA0KICAqIGJ1dCB3ZSBhbGxvdyB1c2VycyB0byBz ZWxlY3QgdGhlaXIgb3duIHZhbHVlcy4NCiAgKi8NCg0KDQotcGdfZmVfc2NyYW1fYnVpbGRf c2VjcmV0KGNvbnN0IGNoYXIgKnBhc3N3b3JkLCBjb25zdCBjaGFyICoqZXJyc3RyKQ0KK3Bn X2ZlX3NjcmFtX2J1aWxkX3NlY3JldChjb25zdCBjaGFyICpwYXNzd29yZCwgaW50IGl0ZXJh dGlvbnMsIGNvbnN0IA0KY2hhciAqKmVycnN0cikNCg0KSSBoYXZlIG1pbGQgd29ycnkgYWJv dXQgY2hhbmdpbmcgdGhpcyBmdW5jdGlvbiBkZWZpbml0aW9uIGZvciBkb3duc3RyZWFtIA0K dXNhZ2UsIGVzcC4gZm9yIGRyaXZlcnMuIFBlcmhhcHMgaXQncyBub3QgdGhhdCBiaWcgb2Yg YSBkZWFsLCBhbmQgDQpwZXJoYXBzIHRoaXMgd2lsbCBlbmQgdXAgYmVpbmcgbmVlZGVkIGZv ciB0aGUgd29yayB3ZSd2ZSBkaXNjdXNzZWQgDQphcm91bmQgIlxwYXNzd29yZCIgYnV0IEkg ZG8gd2FudCB0byBub3RlIHRoYXQgdGhpcyBjb3VsZCBiZSBhIGJyZWFraW5nIA0KY2hhbmdl Lg0KDQoNCisJZWxzZSBpZiAoc3RyY21wKG5hbWUsICJzY3JhbV9zaGEyNTZfaXRlcmF0aW9u cyIpID09IDApDQorCXsNCisJCWNvbm4tPnNjcmFtX2l0ZXJhdGlvbnMgPSBhdG9pKHZhbHVl KTsNCisJfQ0KDQpNYXliZSBvdXQgb2Ygc2NvcGUgZm9yIHRoaXMgcGF0Y2ggYmFzZWQgb24g d2hhdCBlbHNlIGlzIGluIHRoZSBwYXRjaCwgDQpidXQgSSB3YXMgd29uZGVyaW5nIHdoeSB3 ZSBkb24ndCB1c2UgYSAic3RybmNtcCIgaGVyZT8NCg0KVGhhbmtzLA0KDQpKb25hdGhhbg0K --------------fWnd8pQ0BHiGEfM7kAPO4FyV-- --------------ym4o7aGNn5xckaeWxNJ0U4R7 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE+oS2la8r95ogZD/x8QSccp8cZScFAmOaHPgFAwAAAAAACgkQ8QSccp8cZSfW iw//S9aak3C3h7+o7RM2Sftm/QgaiyVcIrs++IA6t0Bnf6GS+Ne0W0ZVdQmyRQE88R+ZHog3rLS4 9SGFagiFYppzTC8guaRNKZT1ZQlVleHQ1JR5GlebKl1FFuBH5YTjrCDUO54ECTs21AoUemGeedAV nHD3fgfEZT8g10EvQGYgnESH9f/1hxpt0+UOXhZ5/hmUdVgBCH9Y44Tk3XHmgQtYraJ0znoLDI+c nSZTI4SJsMt/anptttPf9tnbHSbq9dyEKjPkyHHnBmm/KJQHWwtGtyT0M+NsL2lX9od0rT+5L/lN MP8KyXD+N/flqaYRcecOK5+6pEcHwXf8R3X9kBobAwxJjQt0HO0i0Pv1NYQHFXTv/+MnBQgpRXsn kyCotEwippQL34uCOqrRcqltGO89u2GjkC1jeqRQeJ/KFCwUuttlWivRSJkx+QrO0B7+U7tFJDcX 2BRIuY/csTpo0fe/YsPOm0APlmittKA2STYR6e28u1TbE772yVe3tyWqkAPU/RCKKBVM2yz/+EVS wKJLzYuQdYqMklbDVoa2/f4TuqOiA//2VT+vUdyeo15rlghmjhEfaRIEw96XcddDILTVforYVxl1 0XKjc6C2qZtMhMZ0IeloxQGot40QZTH127N2u9CnZjadAtWhS1KcIjMi0ULz08Yty0sKrrxg4iNM ObI= =i4Qw -----END PGP SIGNATURE----- --------------ym4o7aGNn5xckaeWxNJ0U4R7--