Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-31474

KDF() function

Details

    Description

      A key derivation function, with the same result as EVP_KDF_derive() of OpenSSL.
      Something like

      KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]])

      kdf_name could be one of "pbkdf2_hmac" (default) or "hkdf". The latter always returns NULL if built with OpenSSL 1.0 (default on CentOS 7 and SLES 12).

      width is in bits, can be any positive number divisible by 8.
      if the width is not specified, it's taken from the @@block_encyption_mode

      Attachments

        Issue Links

          includes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-32047 KDF() with negative and multiple of eight width hangs the request

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-32048 It is needed surround the invalid argument with quotes in the warning message of KDF() function

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed
          relates to

          Task - A task that needs to be done. MDEV-9069 extend AES_ENCRYPT() and AES_DECRYPT() to support IV and the algorithm

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik created issue -
            serg Sergei Golubchik made changes -
            Field Original Value New Value
            serg Sergei Golubchik made changes -
            Description A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str [, kdf_name [, salt [, info [, iterations]]]]){noformat}             		A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name ]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"
            serg Sergei Golubchik made changes -
            Description A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name ]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"             		A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name ]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            key width could be either
            * separate optional argument
            * part of kdf_name (like "hkdf-128" or "pbkdf2_hmac-256")
            either way, if it's not specified, it's taken from the {{@@block_encyption_mode}}
            serg Sergei Golubchik made changes -
            Description A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name ]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            key width could be either
            * separate optional argument
            * part of kdf_name (like "hkdf-128" or "pbkdf2_hmac-256")
            either way, if it's not specified, it's taken from the {{@@block_encyption_mode}}             		A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name ]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            key width could be either
            * separate optional argument
            * part of kdf_name (like "hkdf-128" or "pbkdf2_hmac-256")

            either way, if it's not specified, it's taken from the {{@@block_encyption_mode}}
            serg Sergei Golubchik made changes -
            Description A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name ]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            key width could be either
            * separate optional argument
            * part of kdf_name (like "hkdf-128" or "pbkdf2_hmac-256")

            either way, if it's not specified, it's taken from the {{@@block_encyption_mode}}             		A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            either way, if the width is not specified, it's taken from the {{@@block_encyption_mode}}
            serg Sergei Golubchik made changes -
            Fix Version/s 11.2 [ 28603 ]
            serg Sergei Golubchik made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Oleksandr Byelkin [ sanja ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Description A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            either way, if the width is not specified, it's taken from the {{@@block_encyption_mode}}             		A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            if the width is not specified, it's taken from the {{@@block_encyption_mode}}
            serg Sergei Golubchik made changes -
            Description A key derivation function, SQL access to the {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            if the width is not specified, it's taken from the {{@@block_encyption_mode}}             		A key derivation function, with the same result as {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            if the width is not specified, it's taken from the {{@@block_encyption_mode}}
            serg Sergei Golubchik made changes -
            Assignee Oleksandr Byelkin [ sanja ] Sergei Golubchik [ serg ]
            serg Sergei Golubchik made changes -
            Status In Review [ 10002 ] Stalled [ 10000 ]
            serg Sergei Golubchik made changes -
            Description A key derivation function, with the same result as {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "hkdf", "pbkdf2_hmac"

            if the width is not specified, it's taken from the {{@@block_encyption_mode}}             		A key derivation function, with the same result as {{EVP_KDF_derive()}} of OpenSSL.
            Something like
            {noformat}KDF(key_str, salt [, {info | iterations} [, kdf_name [, width ]]]){noformat}

            kdf_name could be one of "pbkdf2_hmac" (default) or "hkdf". The latter always returns NULL if built with OpenSSL 1.0 (default on CentOS 7 and SLES 12).

            width is in bits, can be any positive number divisible by 8.
            if the width is not specified, it's taken from the {{@@block_encyption_mode}}
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Oleksandr Byelkin [ sanja ]
            Status Stalled [ 10000 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Fix Version/s 11.3 [ 28565 ]
            Fix Version/s 11.2 [ 28603 ]
            sanja Oleksandr Byelkin made changes -
            Assignee Oleksandr Byelkin [ sanja ] Sergei Golubchik [ serg ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            serg Sergei Golubchik made changes -
            Priority Major [ 3 ] Critical [ 2 ]
            serg Sergei Golubchik made changes -
            Status Stalled [ 10000 ] In Testing [ 10301 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Lena Startseva [ JIRAUSER50478 ]
            lstartseva Lena Startseva made changes -
            lstartseva Lena Startseva made changes -
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            lstartseva Lena Startseva made changes -
            Assignee Lena Startseva [ JIRAUSER50478 ] Sergei Golubchik [ serg ]
            Status In Testing [ 10301 ] Stalled [ 10000 ]
            serg Sergei Golubchik made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            Labels Preview_11.3
            serg Sergei Golubchik made changes -
            Fix Version/s 11.3.1 [ 29416 ]
            Fix Version/s 11.3 [ 28565 ]
            Resolution Fixed [ 1 ]
            Status Stalled [ 10000 ] Closed [ 6 ]

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.