mariadb

Tree: f0ec34002a

Author	SHA1	Message	Date
Sergei Golubchik	70a2efde03	remove old API for SHA2	9 years ago
Sergei Golubchik	d6a7aece08	my_sha2 service	9 years ago
Sergei Golubchik	bd1139ad27	cleanup: generalize my_sha1.cc move most of the code into my_sha.ic, making it independent from the actual SHAx variant.	9 years ago
Sergei Golubchik	2b1bbac5fa	cleanup: remove a duplicate file	9 years ago
Sergei Golubchik	4fdf25afa8	after-merge: 10.0 part of MDEV-9249 (ERR_remove_state)	10 years ago
Sergei Golubchik	66b9a9409c	New encryption API. Piece-wise encryption. Instead of encrypt(src, dst, key, iv) that encrypts all data in one go, now we have encrypt_init(key,iv), encrypt_update(src,dst), and encrypt_finish(dst). This also causes collateral changes in the internal my_crypt.cc encryption functions and in the encryption service. There are wrappers to provide the old all-at-once encryption functionality. But binlog events are often written piecewise, they'll need the new api.	10 years ago
Sergei Golubchik	e7620ce4ce	MDEV-8281 aes_decrypt crashes in block_crypt() fix aes_decrypt of yassl to support zero-length input	10 years ago
Sergei Golubchik	0f0092720f	my_aes_encrypt_gcm() and my_aes_decrypt_gcm()	11 years ago
Sergei Golubchik	ebc5e00641	my_aes_get_size() return unsigned, not signed. return a value large enough for GCM	11 years ago
Sergei Golubchik	8827eb8325	MDEV-8162 func_str crashes on SELECT AES_DECRYPT(AES_ENCRYPT(...)) on line 107 encrypting 0 byte string is possible	11 years ago
Sergei Golubchik	acd992d4b7	MDEV-8022 Assertion `rc == 0' failed in ma_encrypt on dropping an encrypted Aria table fix encryption of the last partial block * now really encrypt it, using key and iv * support the case of very short plaintext (less than one block) * recommend aes_ctr over aes_cbc, because the former doesn't have problems with partial blocks	11 years ago
Sergei Golubchik	bea3f30d46	move AES_CTR to its own greatly simplified function * don't use do_crypt() for stream cipher AES_CTR * rename do_crypt to block_crypt to emphasize its specialization	11 years ago
Sergei Golubchik	93c563d37b	MDEV-7788 my_md5 crashes with openssl in fips mode Tell OpenSSL to use MD5 even if FIPS prohibits it. This is fine as long as we do not use MD5 for cryptographical purposes (md5 is used internally for P_S message digests and for view checksums)	11 years ago
Sergei Golubchik	cc12a35cde	MDEV-7697 Client reports ERROR 2006 (MySQL server has gone away) or ERROR 2013 (Lost connection to MySQL server during query) while executing AES* functions under SSL Clear OpenSSL error queue after an error in AES_ENCRYPT/AES_DECRYPT. Otherwise it might affect current ssl-encrypted connection.	11 years ago
Sergei Golubchik	4d40a7d133	remove now-empty my_aes.{h,cc} move remaning defines to my_crypt, add MY_ namespace prefix	11 years ago
Sergei Golubchik	bb1b61b312	encryption plugin controls the encryption * no --encryption-algorithm option anymore * encrypt/decrypt methods in the encryption plugin * ecnrypt/decrypt methods in the encryption_km service * file_km plugin has --file-key-management-encryption-algorithm * debug_km always uses aes_cbc * example_km changes between aes_cbc and aes_ecb for different key versions	11 years ago
Sergei Golubchik	b937574293	remove old my_aes_encrypt/decrypt and simplify Item_func_aes_encrypt/decrypt	11 years ago
Sergei Golubchik	91f7363e4b	yassl padding	11 years ago
Sergei Golubchik	f444d13a3b	my_aes* functions: support for different key lengths to: different key lengths	11 years ago
Sergei Golubchik	3bbe2057da	yassl support	11 years ago
Sergei Golubchik	2f8d101f9e	unify my_{en\|de}crypt_{cbc\|ecb\|ctr}. no yassl support yet.	11 years ago
Sergei Golubchik	27cc252bb7	simplify my_crypt.cc, remove duplicate code	11 years ago
Sergei Golubchik	6a7ee5a5a5	encryption cleanup: small changes * comments * move my_bytes_to_key() and my_aes_hex2uint() into file_key_management_plugin * rename HA_INSERT_ORDER -> HA_PRESERVE_INSERT_ORDER * remove unused variables and declarations * fix casts * don't link innodb with pcre * remove redundant entries from aria's TARGET_LINK_LIBRARIES	11 years ago
Jan Lindström	a3e68b4a55	MDEV-7772: SIGSEGV on my_aes_encrypt_cbc when -DWITH_SSL=bundled Two problems: - Read/Write outside of buffer at memcpy() because of incorrect parameters . OPENSSL_assert(EVP_CIPHER_CTX_iv_length(&ctx.ctx) == iv_length); // ECB does not use IV, thus incorrect assertion Added: mysql-test/include/encryption_algorithms.combinations to run tests with methods cbc, ecb and ctr in those systems where they are available (see suite.pm).	11 years ago
Jan Lindström	7c21ea9f50	MDEV-7772: SIGSEGV on my_aes_encrypt_cbc when -DWITH_SSL=bundled Two problems: - Read/Write outside of buffer at memcpy() because of incorrect parameters . OPENSSL_assert(EVP_CIPHER_CTX_iv_length(&ctx.ctx) == iv_length); // ECB does not use IV, thus incorrect assertion Added: mysql-test/include/have_file_key_management_plugin.combinations ( to run with aes_cbc and aes_ecb) mysql-test/include/have_openssl_ctr.combinations ( to run with aes_cbc, aes_ecb and aes_ctr)	11 years ago
Sergei Golubchik	4c9d0b2b0c	yassl builds: don't hide mysys_ssl symbols that cannot possibly collide with openssl	11 years ago
Sergei Golubchik	f3da18f635	cmake-time detection for EVP_aes_128_ctr() because old openssl versions (e.g. on labrador) don't have it	11 years ago
Sergei Golubchik	cf8bf0b68e	encryption key management plugin api	11 years ago
Sergei Golubchik	d7d589dc01	Further fixes (copied from `d7d589dc`)	11 years ago
Michael Widenius	1e3e19a4dd	Fixes for encryption from eperi	11 years ago
Monty	fb7a504ee1	Pushed files missing in last commit	11 years ago
Monty	977a87da5a	Cleanup to be able to compile with YASSL. Temporary push as some tests still fails.	11 years ago
Jan Lindström	df09bd359c	MDEV-6992: Code review of changes in page encryption	11 years ago
Nirbhay Choubey	61f73d40ca	MDEV-7397: SIGSEGV on inserting into a key-less table When wsrep is enabled, an md5 hash of the entire row is calculated for tables with no PK. It, however segfaulted as the md5 context object was not properly constructed. Fixed by ensuring that the YaSSL's context object gets constructed explicitly at the specified pre-allocated location (placement) before its used. Added a test case.	11 years ago
Sergei Golubchik	d6141a553c	MD5 service	11 years ago
Sergei Golubchik	11b6452a0f	extend SHA1 service. cleanup of sha1 wrappers	11 years ago
Nirbhay Choubey	65f2f289d1	MDEV#5626 : Cannot install InnoDB/XtraDB plugin (undefined symbol: wsrep_md5_update) Refactored wsrep's md5 related code so that Innodb/xtradb no longer relies on mysys_ssl for md5 implementation.	12 years ago
Sergei Golubchik	bec1d903d9	Do the partial merge of WL#5602 correctly: Remove unused code (that should not have been merged) Add protocol extension (that should have been merged) Fix bugs (see pack.c)	12 years ago
Sergei Golubchik	3e9446a742	SHA1 service (because mysql_ssl library is built with -fvisibility=hidden)	12 years ago
Michael Widenius	5f1f2fc0e4	Applied all changes from Igor and Sanja	12 years ago
Michael Widenius	068c61978e	Temporary commit of 10.0-merge	13 years ago

41 Commits (f0ec34002a98eeb669cb254eaba6a3d678a58cc1)