Details
-
New Feature
-
Status: In Testing (View Workflow)
-
Critical
-
Resolution: Unresolved
Description
Currently the performance schema uses md5 digests.
A SHA256 hash is more modern and while the use doesn't require cryptographic security, its an easy enough change MySQL implementation.
XXH3, added to MariaDB in MDEV-9826, Is being implemented as a much faster algorithm.
Please note that the MariaDB PS DIGEST feature is not a security feature and is not meant to be used as such.
MariaDB's current implementation is purely for query identification in statistics, not database activity monitoring etc.
As such, a fast hashing algo like XXH3 is a significantly better choice than the slow SHA256.
More generally, XXH3 is not a secure hash, and it should not be used for security purposes.
Attachments
Issue Links
- is part of
-
MDEV-25372 Deprecate SHA-1 algorithm from mariadb-server
-
- Open
-
-
MDEV-26318 update P_S to 8.0.x
-
- Open
-
-
MDEV-28906 MySQL 8.0 desired compatibility
-
- Open
-
- relates to
-
MDEV-9826 better hash algorithms for PARTITION BY KEY
-
- Closed
-
- has action item
-
DOCS-6054 Loading...