Details
-
Task
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
Description
A key derivation function, with the same result as EVP_KDF_derive() of OpenSSL.
Something like
KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]])
|
kdf_name could be one of "pbkdf2_hmac" (default) or "hkdf". The latter always returns NULL if built with OpenSSL 1.0 (default on CentOS 7 and SLES 12).
width is in bits, can be any positive number divisible by 8.
if the width is not specified, it's taken from the @@block_encyption_mode
Attachments
Issue Links
- includes
-
MDEV-32047 KDF() with negative and multiple of eight width hangs the request
- Closed
-
MDEV-32048 It is needed surround the invalid argument with quotes in the warning message of KDF() function
- Closed
- relates to
-
MDEV-9069 extend AES_ENCRYPT() and AES_DECRYPT() to support IV and the algorithm
- Closed