| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
don't use internal undocumented OpenSSL functionality
|
|
|
|
|
|
| |
Added service for
- encryption (AES)
- error reporting, e.g my_printf_error()
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Instead of encrypt(src, dst, key, iv) that encrypts all
data in one go, now we have encrypt_init(key,iv),
encrypt_update(src,dst), and encrypt_finish(dst).
This also causes collateral changes in the internal my_crypt.cc
encryption functions and in the encryption service.
There are wrappers to provide the old all-at-once encryption
functionality. But binlog events are often written piecewise,
they'll need the new api.
|
|
|
|
| |
fix aes_decrypt of yassl to support zero-length input
|
| |
|
|
|
|
|
| |
return unsigned, not signed.
return a value large enough for GCM
|
| |
|
|
|
|
| |
encrypting 0 byte string *is* possible
|
|
|
|
|
|
|
|
|
|
|
| |
Aria table
fix encryption of the last partial block
* now really encrypt it, using key and iv
* support the case of very short plaintext (less than one block)
* recommend aes_ctr over aes_cbc, because the former
doesn't have problems with partial blocks
|
|
|
|
|
| |
* don't use do_crypt() for stream cipher AES_CTR
* rename do_crypt to block_crypt to emphasize its specialization
|
|
|
|
| |
move remaning defines to my_crypt, add MY_ namespace prefix
|
|
|
|
|
|
|
|
|
| |
* no --encryption-algorithm option anymore
* encrypt/decrypt methods in the encryption plugin
* ecnrypt/decrypt methods in the encryption_km service
* file_km plugin has --file-key-management-encryption-algorithm
* debug_km always uses aes_cbc
* example_km changes between aes_cbc and aes_ecb for different key versions
|
| |
|
|
|
|
| |
to: different key lengths
|
| |
|
| |
|
| |
|
|
|
|
| |
because old openssl versions (e.g. on labrador) don't have it
|
|
|