Search Postgresql Archives

Re: scram-sha-256 authentication broken in FIPS mode

Subject: Re: scram-sha-256 authentication broken in FIPS mode
From: Alessandro Gherardi <alessandro.gherardi@xxxxxxxxx>
Date: Mon, 10 Sep 2018 14:52:00 +0000 (UTC)
Cc: "pgsql-general@xxxxxxxxxxxxxxxxxxxx" <pgsql-general@xxxxxxxxxxxxxxxxxxxx>
In-reply-to: <1924578892.946938.1536301653576@mail.yahoo.com>
References: <898098721.1290085.1536118171911.ref@mail.yahoo.com> <898098721.1290085.1536118171911@mail.yahoo.com> <20180905042717.GL20696@paquier.xyz> <767499000.1481233.1536153579656@mail.yahoo.com> <20180905181545.GC2726@paquier.xyz> <1691863835.972001.1536301001998@mail.yahoo.com> <1924578892.946938.1536301653576@mail.yahoo.com>

I changed the implementation of the other SHA digests to use EVP also.

I verified that, with these changes, scram-sha-256 works when FIPS is enabled.

Attachment: sha2.h.diff
Description: Binary data

Attachment: sha2_openssl.c.diff
Description: Binary data

Follow-Ups:
- Re: scram-sha-256 authentication broken in FIPS mode
  - From: Michael Paquier

References:
- scram-sha-256 authentication broken in FIPS mode
  - From: Alessandro Gherardi
- Re: scram-sha-256 authentication broken in FIPS mode
  - From: Michael Paquier
- Re: scram-sha-256 authentication broken in FIPS mode
  - From: Alessandro Gherardi
- Re: scram-sha-256 authentication broken in FIPS mode
  - From: Michael Paquier
- Re: scram-sha-256 authentication broken in FIPS mode
  - From: Alessandro Gherardi