public inbox for [email protected]  
help / color / mirror / Atom feed
From: Peter Eisentraut <[email protected]>
To: Jacob Champion <[email protected]>
To: Robert Haas <[email protected]>
Cc: pgsql-hackers <[email protected]>
Subject: Re: Transparent column encryption
Date: Tue, 30 Aug 2022 13:53:49 +0200
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
	<[email protected]>
	<[email protected]>
	<[email protected]>
	<[email protected]>
	<[email protected]>
	<CA+TgmoZEqrXKEo4DZEosBy5HyQG97saZ0=uk7X9Trj2=COvZ-w@mail.gmail.com>
	<CAAWbhmgNL5wNzy-LcnGeyW7KL8_pt0VnD46qn+L8OfeQP+g8uA@mail.gmail.com>
	<CA+Tgmob_6zqqy2xdqh--Rwesszr_e9SFFXgC3zZJHkbLbH3O_Q@mail.gmail.com>
	<CAAWbhmhk_Wd-4GR=NMfMccke=ZUpprpjRTd3jRRckXQwdu0ZLw@mail.gmail.com>
	<CA+TgmoaW9_DPYoADt5MbkUu+2i9n6gdCVJkRUFhucwAkK_dUVw@mail.gmail.com>
	<[email protected]>

On 27.07.22 01:19, Jacob Champion wrote:
>> Now, if we don't have a padding system
>> built into the feature, then that does put even more on the user; it's
>> hard to argue with that.
> Right. If they can even fix it at all. Having a well-documented padding
> feature would not only help mitigate that, it would conveniently hang a
> big sign on the caveats that exist.

I would be interested in learning more about such padding systems.  I 
have done a lot of reading for this development project, and I have 
never come across a cryptographic approach to hide length differences by 
padding.  Of course, padding to the block cipher's block size is already 
part of the process, but that is done out of necessity, not because you 
want to disguise the length.  Are there any other methods?  I'm 
interested to learn more.





view thread (53+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Transparent column encryption
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox