Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p5G8J-0002OW-Cc for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Dec 2022 01:00:28 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1p5G8H-0005kK-Vv for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Dec 2022 01:00:25 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p5G8G-0005kA-Be for pgsql-hackers@lists.postgresql.org; Wed, 14 Dec 2022 01:00:25 +0000 Received: from out1-smtp.messagingengine.com ([66.111.4.25]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p5G8D-0006o1-Ax for pgsql-hackers@lists.postgresql.org; Wed, 14 Dec 2022 01:00:23 +0000 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 9B5915C0182; Tue, 13 Dec 2022 20:00:19 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Tue, 13 Dec 2022 20:00:19 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= cc:cc:content-type:date:date:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to; s=fm2; t=1670979619; x=1671066019; bh=j9bnMawnV/ ixdbAEJ7KsHTuqxDoE7d9VKYL80pir18A=; b=J0zssJnygZiBwp5ssnd6h/dCOo WL7CcNUJJ9GuWPBlupbFGBUDxdb4po8VusvEUxErOb38NFoPjYldU9s/NRmyUHWw sGHTns8wJIIO686zNOoK3MCfHhpBoKw+IvZPuq1zJBXz9Jx2uJXchMEjtiJYlz7+ aWIrJIkApCJd6mzcVsdJ1FqNryII0Tu8wVqx6q2Ak0afuitTv8ZF042n904qGAVB wzQxEgsaKUhGpKnwwVc+ExRu6uWi8ZnV88VHHJcpwduCRn+NPwY7gwAvFuC7Iqrd qo0A0q1Xv5Xg4GmJ/7Z/6bWDPsmRbN4K0bM3R2QkXWIdEQHN6wzgTeMxF7cQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:in-reply-to:message-id :mime-version:references:reply-to:sender:subject:subject:to:to :x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm2; t=1670979619; x=1671066019; bh=j9bnMawnV/ixdbAEJ7KsHTuqxDoE 7d9VKYL80pir18A=; b=nt4doxRZbsVxQxUML7Y4TGa8X/l76pZoMGVz7PJng7hM bh185Z81DyCV+Guvv71BSxNq/0TmpDtMrBrx0Sp354hV0a2hAibqg8T+6e9O+w0L MGEVXXF5wl4zS9g2FMGaMFWMqPhEnhgwvxwepTpuAVcMft6pJhZUYQQ21RoosHSC pMPbTvJmP6ogCGU4uEPwGSh46Ih7YoQ/ig3uMzeLmBkWV46mORbsFixW1pOE5OyT py5NCmttKEGJ6Pma8nQaIfcL4goJlnP9vzUgodgWbFsibytAsUUPQDViLrD7fUZU PMWWn1xMxo6q5b1Izjyx+X5/h6vw2nPuKBgG0G4E3A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedvgddvjecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenfg hrlhcuvffnffculdejtddmnecujfgurhepfffhvfevuffkfhggtggujgesghdtreertddt vdenucfhrhhomhepofhitghhrggvlhcurfgrqhhuihgvrhcuoehmihgthhgrvghlsehprg hquhhivghrrdighiiiqeenucggtffrrghtthgvrhhnpeetleeifedufffhhfdtteelgeeg geffhfekueevteeigfduudevudetgfegiedvjeenucevlhhushhtvghrufhiiigvpedtne curfgrrhgrmhepmhgrihhlfhhrohhmpehmihgthhgrvghlsehprghquhhivghrrdighiii X-ME-Proxy: Feedback-ID: i0fe9450f:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 13 Dec 2022 20:00:17 -0500 (EST) Date: Wed, 14 Dec 2022 10:00:13 +0900 From: Michael Paquier To: Daniel Gustafsson Cc: "Jonathan S. Katz" , Andres Freund , PostgreSQL Hackers Subject: Re: Raising the SCRAM iteration count Message-ID: References: <20221210001538.czikyvk3xtkphxfu@awork3.anarazel.de> <4880738a-cbf7-c9a1-4faf-ba861c731c63@postgresql.org> <75619A47-4CD0-4E0F-8A30-32F83FF593DD@yesql.se> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="T3eymtLWzUKGdLkJ" Content-Disposition: inline In-Reply-To: <75619A47-4CD0-4E0F-8A30-32F83FF593DD@yesql.se> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --T3eymtLWzUKGdLkJ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Dec 13, 2022 at 12:17:58PM +0100, Daniel Gustafsson wrote: > It does raise an interesting point though, if we in the future add suppprt for > SCRAM-SHA-512 (which seems reasonable to do) it's not good enough to have a > single GUC for SCRAM iterations; we'd need to be able to set the iteration > count per algorithm. I'll account for that when updating the patch downthread. So, you mean that the GUC should be named like password_iterations, taking a grammar with a list like 'scram-sha-256=4096,algo2=5000'? -- Michael --T3eymtLWzUKGdLkJ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAmOZIB0ACgkQnvQgOdby QH2yjxAAqQtpB2riWpXm0YGnl7ZpWYITu2F439ZtgHdOEiYR9ITqCENEiixAcux/ 1IHWjou9+Yl7uIhiRzda/CKfjX4dDFi/InvXlrPCngW/hzFsjNoc4ihGY/J5PZt4 r54PZPq4R29TSG2ikSLPdkJmn1EF3/fZ1nNdvf7nB5FaZjfUW8AgayqsWYeEFm6q exIOxZoT+MnHtNSMUWFPhZzYOMKMOaNc6ElWNEPrdcV5i5g74JZ8vPjgeCe5G/2y h7/XKvPRA2X00AvYf+KD9aINthMl/PYjL79pgm4mnmA1Ekf4Zv0SmENWhK50KI9v msFVlaIqK427BROX2bU4fufSCjzwqJkVrOJhds0U1td4+cQP1xCietS2JKKyceWZ FSU4WmW+meX7wgOqFy5StpsrQ0tP3kBQ6CaYfj4ZIoWwWCr+xbQpDRH2p7IiXaDQ 4JaVdI7aPK8vvgPb8a7JTmTH6RK+5vfD2jE1q9bcKsU1Wo/mpPg0YlvM2uc48Tf9 w/A78705ERD6irKajczkn94n65RJ6AsOPe4qZ4OY9f/lWWQTwj3/NRuYrJnfpXOX xdbLtinepZgn2botEytWaxIuopP8GdQD2jCydSMTNGdBpP6URsTMduAT1D4C4eCT f5vQK2AO3/Ls/7P7vamgTLbeXXwlKPaeGfAZ0QwM61NZDgkG7uI= =iAzy -----END PGP SIGNATURE----- --T3eymtLWzUKGdLkJ--