mariadb

Tree: acd992d4b7

Author	SHA1	Message	Date
Sergei Golubchik	acd992d4b7	MDEV-8022 Assertion `rc == 0' failed in ma_encrypt on dropping an encrypted Aria table fix encryption of the last partial block * now really encrypt it, using key and iv * support the case of very short plaintext (less than one block) * recommend aes_ctr over aes_cbc, because the former doesn't have problems with partial blocks	11 years ago
Sergei Golubchik	97d5de4ccf	Add encryption key id to the API as a distinct concept which is separate from the encryption key version	11 years ago
Sergei Golubchik	65e7826070	renames to follow single consistent naming style with namespace prefixes	11 years ago
Sergei Golubchik	bb1b61b312	encryption plugin controls the encryption * no --encryption-algorithm option anymore * encrypt/decrypt methods in the encryption plugin * ecnrypt/decrypt methods in the encryption_km service * file_km plugin has --file-key-management-encryption-algorithm * debug_km always uses aes_cbc * example_km changes between aes_cbc and aes_ecb for different key versions	11 years ago
Sergei Golubchik	9ccafffc29	rename "encryption key management plugin" to "encryption plugin" because it's going to do more than just key management	11 years ago
Sergei Golubchik	ef5b4889c2	optimize encryption api only one encryption key lookup in most cases instead of three (has_key, get_key_size, get_key).	11 years ago
Sergei Golubchik	e02749aaf5	completely rewrote file_key_management plugin numerous issues fixed: * buffer overflows * error conditions aren't checked (crash if file doesn't exist) * accessing random unallocated memory * hard-coded password * arbitrary hard-coded key id limit * incomprehensible error messages (for key_id == 0 it reported "The key could not be initialized", for syntax errors the message was "Wrong match of the keyID, see the template", for a key id larger than hard-coded limit the message was "No asked key", and there was an error "Is comment" for a comment). * tons of small mallocs, many are freed few lines down in the code * malloc(N) and new char[N] are used both, even in the same function * redundant memory copies * pcre - "I can solve it with regular expressions" - with incorrect regexes * parser context stored in a singleton * keys are stored as strings and are strlen-ed and hex2bin-ed on every get_key() request * lots of useless code (e.g. sprintf instead of a pointer assignment, checking of the file length to read a part of it in a fixed buffer, multiplying by sizeof(char) in many places, etc) * this list is not exhaustive	11 years ago
Sergei Golubchik	88632726e8	rename plugins to remove "_plugin" from the plugin name	11 years ago
Sergei Golubchik	5d8dbee97b	remove get_iv() from the key management plugin API now IVs are always handled internally	11 years ago
Sergei Golubchik	6a7ee5a5a5	encryption cleanup: small changes * comments * move my_bytes_to_key() and my_aes_hex2uint() into file_key_management_plugin * rename HA_INSERT_ORDER -> HA_PRESERVE_INSERT_ORDER * remove unused variables and declarations * fix casts * don't link innodb with pcre * remove redundant entries from aria's TARGET_LINK_LIBRARIES	11 years ago
Sergei Golubchik	21430e4378	encryption keys service	11 years ago
Sergei Golubchik	cf8bf0b68e	encryption key management plugin api	11 years ago
Sergei Golubchik	d7d589dc01	Further fixes (copied from `d7d589dc`)	11 years ago
Michael Widenius	1e3e19a4dd	Fixes for encryption from eperi	11 years ago
Monty	977a87da5a	Cleanup to be able to compile with YASSL. Temporary push as some tests still fails.	11 years ago

8 Commits (acd992d4b7fafa40a1c7a85b64238829b831e0bf)