#include <sys/param.h>

Include dependency graph for px.h:

This graph shows which files directly or indirectly include this file:

Data Structures
struct	px_digest

struct	px_alias

struct	px_hmac

struct	px_cipher

struct	px_combo

Macros
#define	PX_DEBUG

#define	PX_MAX_SALT_LEN 128

#define	PXE_OK 0

#define	PXE_NO_HASH -2

#define	PXE_NO_CIPHER -3

#define	PXE_BAD_OPTION -5

#define	PXE_BAD_FORMAT -6

#define	PXE_KEY_TOO_BIG -7

#define	PXE_CIPHER_INIT -8

#define	PXE_HASH_UNUSABLE_FOR_HMAC -9

#define	PXE_BUG -12

#define	PXE_ARGUMENT_ERROR -13

#define	PXE_UNKNOWN_SALT_ALGO -14

#define	PXE_BAD_SALT_ROUNDS -15

#define	PXE_NO_RANDOM -17

#define	PXE_DECRYPT_FAILED -18

#define	PXE_ENCRYPT_FAILED -19

#define	PXE_PGP_CORRUPT_DATA -100

#define	PXE_PGP_CORRUPT_ARMOR -101

#define	PXE_PGP_UNSUPPORTED_COMPR -102

#define	PXE_PGP_UNSUPPORTED_CIPHER -103

#define	PXE_PGP_UNSUPPORTED_HASH -104

#define	PXE_PGP_COMPRESSION_ERROR -105

#define	PXE_PGP_NOT_TEXT -106

#define	PXE_PGP_UNEXPECTED_PKT -107

#define	PXE_PGP_MATH_FAILED -109

#define	PXE_PGP_SHORT_ELGAMAL_KEY -110

#define	PXE_PGP_UNKNOWN_PUBALGO -112

#define	PXE_PGP_WRONG_KEY -113

#define	PXE_PGP_MULTIPLE_KEYS -114

#define	PXE_PGP_EXPECT_PUBLIC_KEY -115

#define	PXE_PGP_EXPECT_SECRET_KEY -116

#define	PXE_PGP_NOT_V4_KEYPKT -117

#define	PXE_PGP_KEYPKT_CORRUPT -118

#define	PXE_PGP_NO_USABLE_KEY -119

#define	PXE_PGP_NEED_SECRET_PSW -120

#define	PXE_PGP_BAD_S2K_MODE -121

#define	PXE_PGP_UNSUPPORTED_PUBALGO -122

#define	PXE_PGP_MULTIPLE_SUBKEYS -123

#define	px_md_result_size(md) (md)->result_size(md)

#define	px_md_block_size(md) (md)->block_size(md)

#define	px_md_reset(md) (md)->reset(md)

#define	px_md_update(md, data, dlen) (md)->update(md, data, dlen)

#define	px_md_finish(md, buf) (md)->finish(md, buf)

#define	px_md_free(md) (md)->free(md)

#define	px_hmac_result_size(hmac) (hmac)->result_size(hmac)

#define	px_hmac_block_size(hmac) (hmac)->block_size(hmac)

#define	px_hmac_reset(hmac) (hmac)->reset(hmac)

#define	px_hmac_init(hmac, key, klen) (hmac)->init(hmac, key, klen)

#define	px_hmac_update(hmac, data, dlen) (hmac)->update(hmac, data, dlen)

#define	px_hmac_finish(hmac, buf) (hmac)->finish(hmac, buf)

#define	px_hmac_free(hmac) (hmac)->free(hmac)

#define	px_cipher_key_size(c) (c)->key_size(c)

#define	px_cipher_block_size(c) (c)->block_size(c)

#define	px_cipher_iv_size(c) (c)->iv_size(c)

#define	px_cipher_init(c, k, klen, iv) (c)->init(c, k, klen, iv)

#define	px_cipher_encrypt(c, padding, data, dlen, res, rlen) (c)->encrypt(c, padding, data, dlen, res, rlen)

#define	px_cipher_decrypt(c, padding, data, dlen, res, rlen) (c)->decrypt(c, padding, data, dlen, res, rlen)

#define	px_cipher_free(c) (c)->free(c)

#define	px_combo_encrypt_len(c, dlen) (c)->encrypt_len(c, dlen)

#define	px_combo_decrypt_len(c, dlen) (c)->decrypt_len(c, dlen)

#define	px_combo_init(c, key, klen, iv, ivlen) (c)->init(c, key, klen, iv, ivlen)

#define	px_combo_encrypt(c, data, dlen, res, rlen) (c)->encrypt(c, data, dlen, res, rlen)

#define	px_combo_decrypt(c, data, dlen, res, rlen) (c)->decrypt(c, data, dlen, res, rlen)

#define	px_combo_free(c) (c)->free(c)

Typedefs
typedef enum BuiltinCryptoOptions	BuiltinCryptoOptions

typedef struct px_digest	PX_MD

typedef struct px_alias	PX_Alias

typedef struct px_hmac	PX_HMAC

typedef struct px_cipher	PX_Cipher

typedef struct px_combo	PX_Combo

Enumerations
enum	BuiltinCryptoOptions { BC_ON , BC_OFF , BC_FIPS }

Functions
int	px_find_digest (const char name, PX_MD *res)

int	px_find_hmac (const char name, PX_HMAC *res)

int	px_find_cipher (const char name, PX_Cipher *res)

int	px_find_combo (const char name, PX_Combo *res)

pg_noreturn void	px_THROW_ERROR (int err)

const char *	px_strerror (int err)

const char *	px_resolve_alias (const PX_Alias list, const char name)

void	px_set_debug_handler (void(handler)(const char ))

void	px_memset (void *ptr, int c, size_t len)

bool	CheckFIPSMode (void)

void	CheckBuiltinCryptoMode (void)

void	px_debug (const char *fmt,...) pg_attribute_printf(1

Variables
int	builtin_crypto_enabled

Macro Definition Documentation

◆ px_cipher_block_size

#define px_cipher_block_size ( c ) (c)->block_size(c)

Definition at line 219 of file px.h.

◆ px_cipher_decrypt

#define px_cipher_decrypt	(	c,
		padding,
		data,
		dlen,
		res,
		rlen
	)	(c)->decrypt(c, padding, data, dlen, res, rlen)

Definition at line 224 of file px.h.

◆ px_cipher_encrypt

#define px_cipher_encrypt	(	c,
		padding,
		data,
		dlen,
		res,
		rlen
	)	(c)->encrypt(c, padding, data, dlen, res, rlen)

Definition at line 222 of file px.h.

◆ px_cipher_free

#define px_cipher_free ( c ) (c)->free(c)

Definition at line 226 of file px.h.

◆ px_cipher_init

#define px_cipher_init	(	c,
		k,
		klen,
		iv
	)	(c)->init(c, k, klen, iv)

Definition at line 221 of file px.h.

◆ px_cipher_iv_size

#define px_cipher_iv_size ( c ) (c)->iv_size(c)

Definition at line 220 of file px.h.

◆ px_cipher_key_size

#define px_cipher_key_size ( c ) (c)->key_size(c)

Definition at line 218 of file px.h.

◆ px_combo_decrypt

#define px_combo_decrypt	(	c,
		data,
		dlen,
		res,
		rlen
	)	(c)->decrypt(c, data, dlen, res, rlen)

Definition at line 235 of file px.h.

◆ px_combo_decrypt_len

#define px_combo_decrypt_len	(	c,
		dlen
	)	(c)->decrypt_len(c, dlen)

Definition at line 230 of file px.h.

◆ px_combo_encrypt

#define px_combo_encrypt	(	c,
		data,
		dlen,
		res,
		rlen
	)	(c)->encrypt(c, data, dlen, res, rlen)

Definition at line 233 of file px.h.

◆ px_combo_encrypt_len

#define px_combo_encrypt_len	(	c,
		dlen
	)	(c)->encrypt_len(c, dlen)

Definition at line 229 of file px.h.

◆ px_combo_free

#define px_combo_free ( c ) (c)->free(c)

Definition at line 237 of file px.h.

◆ px_combo_init

#define px_combo_init	(	c,
		key,
		klen,
		iv,
		ivlen
	)	(c)->init(c, key, klen, iv, ivlen)

Definition at line 231 of file px.h.

◆ PX_DEBUG

#define PX_DEBUG

Definition at line 38 of file px.h.

◆ px_hmac_block_size

#define px_hmac_block_size ( hmac ) (hmac)->block_size(hmac)

Definition at line 210 of file px.h.

◆ px_hmac_finish

#define px_hmac_finish	(	hmac,
		buf
	)	(hmac)->finish(hmac, buf)

Definition at line 214 of file px.h.

◆ px_hmac_free

#define px_hmac_free ( hmac ) (hmac)->free(hmac)

Definition at line 215 of file px.h.

◆ px_hmac_init

#define px_hmac_init	(	hmac,
		key,
		klen
	)	(hmac)->init(hmac, key, klen)

Definition at line 212 of file px.h.

◆ px_hmac_reset

#define px_hmac_reset ( hmac ) (hmac)->reset(hmac)

Definition at line 211 of file px.h.

◆ px_hmac_result_size

#define px_hmac_result_size ( hmac ) (hmac)->result_size(hmac)

Definition at line 209 of file px.h.

◆ px_hmac_update

#define px_hmac_update	(	hmac,
		data,
		dlen
	)	(hmac)->update(hmac, data, dlen)

Definition at line 213 of file px.h.

◆ PX_MAX_SALT_LEN

#define PX_MAX_SALT_LEN 128

Definition at line 41 of file px.h.

◆ px_md_block_size

#define px_md_block_size ( md ) (md)->block_size(md)

Definition at line 203 of file px.h.

◆ px_md_finish

#define px_md_finish	(	md,
		buf
	)	(md)->finish(md, buf)

Definition at line 206 of file px.h.

◆ px_md_free

#define px_md_free ( md ) (md)->free(md)

Definition at line 207 of file px.h.

◆ px_md_reset

#define px_md_reset ( md ) (md)->reset(md)

Definition at line 204 of file px.h.

◆ px_md_result_size

#define px_md_result_size ( md ) (md)->result_size(md)

Definition at line 202 of file px.h.

◆ px_md_update

#define px_md_update	(	md,
		data,
		dlen
	)	(md)->update(md, data, dlen)

Definition at line 205 of file px.h.

◆ PXE_ARGUMENT_ERROR

#define PXE_ARGUMENT_ERROR -13

Definition at line 59 of file px.h.

◆ PXE_BAD_FORMAT

#define PXE_BAD_FORMAT -6

Definition at line 52 of file px.h.

◆ PXE_BAD_OPTION

#define PXE_BAD_OPTION -5

Definition at line 51 of file px.h.

◆ PXE_BAD_SALT_ROUNDS

#define PXE_BAD_SALT_ROUNDS -15

Definition at line 61 of file px.h.

◆ PXE_BUG

#define PXE_BUG -12

Definition at line 58 of file px.h.

◆ PXE_CIPHER_INIT

#define PXE_CIPHER_INIT -8

Definition at line 54 of file px.h.

◆ PXE_DECRYPT_FAILED

#define PXE_DECRYPT_FAILED -18

Definition at line 64 of file px.h.

◆ PXE_ENCRYPT_FAILED

#define PXE_ENCRYPT_FAILED -19

Definition at line 65 of file px.h.

◆ PXE_HASH_UNUSABLE_FOR_HMAC

#define PXE_HASH_UNUSABLE_FOR_HMAC -9

Definition at line 55 of file px.h.

◆ PXE_KEY_TOO_BIG

#define PXE_KEY_TOO_BIG -7

Definition at line 53 of file px.h.

◆ PXE_NO_CIPHER

#define PXE_NO_CIPHER -3

Definition at line 49 of file px.h.

◆ PXE_NO_HASH

#define PXE_NO_HASH -2

Definition at line 48 of file px.h.

◆ PXE_NO_RANDOM

#define PXE_NO_RANDOM -17

Definition at line 63 of file px.h.

◆ PXE_OK

#define PXE_OK 0

Definition at line 46 of file px.h.

◆ PXE_PGP_BAD_S2K_MODE

#define PXE_PGP_BAD_S2K_MODE -121

Definition at line 88 of file px.h.

◆ PXE_PGP_COMPRESSION_ERROR

#define PXE_PGP_COMPRESSION_ERROR -105

Definition at line 72 of file px.h.

◆ PXE_PGP_CORRUPT_ARMOR

#define PXE_PGP_CORRUPT_ARMOR -101

Definition at line 68 of file px.h.

◆ PXE_PGP_CORRUPT_DATA

#define PXE_PGP_CORRUPT_DATA -100

Definition at line 67 of file px.h.

◆ PXE_PGP_EXPECT_PUBLIC_KEY

#define PXE_PGP_EXPECT_PUBLIC_KEY -115

Definition at line 82 of file px.h.

◆ PXE_PGP_EXPECT_SECRET_KEY

#define PXE_PGP_EXPECT_SECRET_KEY -116

Definition at line 83 of file px.h.

◆ PXE_PGP_KEYPKT_CORRUPT

#define PXE_PGP_KEYPKT_CORRUPT -118

Definition at line 85 of file px.h.

◆ PXE_PGP_MATH_FAILED

#define PXE_PGP_MATH_FAILED -109

Definition at line 76 of file px.h.

◆ PXE_PGP_MULTIPLE_KEYS

#define PXE_PGP_MULTIPLE_KEYS -114

Definition at line 81 of file px.h.

◆ PXE_PGP_MULTIPLE_SUBKEYS

#define PXE_PGP_MULTIPLE_SUBKEYS -123

Definition at line 90 of file px.h.

◆ PXE_PGP_NEED_SECRET_PSW

#define PXE_PGP_NEED_SECRET_PSW -120

Definition at line 87 of file px.h.

◆ PXE_PGP_NO_USABLE_KEY

#define PXE_PGP_NO_USABLE_KEY -119

Definition at line 86 of file px.h.

◆ PXE_PGP_NOT_TEXT

#define PXE_PGP_NOT_TEXT -106

Definition at line 73 of file px.h.

◆ PXE_PGP_NOT_V4_KEYPKT

#define PXE_PGP_NOT_V4_KEYPKT -117

Definition at line 84 of file px.h.

◆ PXE_PGP_SHORT_ELGAMAL_KEY

#define PXE_PGP_SHORT_ELGAMAL_KEY -110

Definition at line 77 of file px.h.

◆ PXE_PGP_UNEXPECTED_PKT

#define PXE_PGP_UNEXPECTED_PKT -107

Definition at line 74 of file px.h.

◆ PXE_PGP_UNKNOWN_PUBALGO

#define PXE_PGP_UNKNOWN_PUBALGO -112

Definition at line 79 of file px.h.

◆ PXE_PGP_UNSUPPORTED_CIPHER

#define PXE_PGP_UNSUPPORTED_CIPHER -103

Definition at line 70 of file px.h.

◆ PXE_PGP_UNSUPPORTED_COMPR

#define PXE_PGP_UNSUPPORTED_COMPR -102

Definition at line 69 of file px.h.

◆ PXE_PGP_UNSUPPORTED_HASH

#define PXE_PGP_UNSUPPORTED_HASH -104

Definition at line 71 of file px.h.

◆ PXE_PGP_UNSUPPORTED_PUBALGO

#define PXE_PGP_UNSUPPORTED_PUBALGO -122

Definition at line 89 of file px.h.

◆ PXE_PGP_WRONG_KEY

#define PXE_PGP_WRONG_KEY -113

Definition at line 80 of file px.h.

◆ PXE_UNKNOWN_SALT_ALGO

#define PXE_UNKNOWN_SALT_ALGO -14

Definition at line 60 of file px.h.

Typedef Documentation

◆ BuiltinCryptoOptions

typedef enum BuiltinCryptoOptions BuiltinCryptoOptions

◆ PX_Alias

typedef struct px_alias PX_Alias

Definition at line 100 of file px.h.

◆ PX_Cipher

typedef struct px_cipher PX_Cipher

Definition at line 102 of file px.h.

◆ PX_Combo

typedef struct px_combo PX_Combo

Definition at line 103 of file px.h.

◆ PX_HMAC

typedef struct px_hmac PX_HMAC

Definition at line 101 of file px.h.

◆ PX_MD

typedef struct px_digest PX_MD

Definition at line 99 of file px.h.

Enumeration Type Documentation

◆ BuiltinCryptoOptions

enum BuiltinCryptoOptions

Enumerator
BC_ON
BC_OFF
BC_FIPS

Definition at line 92 of file px.h.

{
    BC_ON,
    BC_OFF,
    BC_FIPS,
}           BuiltinCryptoOptions;

Function Documentation

◆ CheckBuiltinCryptoMode()

void CheckBuiltinCryptoMode ( void )

Definition at line 874 of file openssl.c.

{
    if (builtin_crypto_enabled == BC_ON)
        return;
 
    if (builtin_crypto_enabled == BC_OFF)
        ereport(ERROR,
                errmsg("use of built-in crypto functions is disabled"));
 
    Assert(builtin_crypto_enabled == BC_FIPS);
 
    if (CheckFIPSMode() == true)
        ereport(ERROR,
                errmsg("use of non-FIPS validated crypto not allowed when OpenSSL is in FIPS mode"));
}

References Assert(), BC_FIPS, BC_OFF, BC_ON, builtin_crypto_enabled, CheckFIPSMode(), ereport, errmsg(), and ERROR.

Referenced by px_crypt(), and px_gen_salt().

◆ CheckFIPSMode()

bool CheckFIPSMode ( void )

Definition at line 844 of file openssl.c.

{
    int         fips_enabled = 0;
 
    /*
     * EVP_default_properties_is_fips_enabled was added in OpenSSL 3.0, before
     * that FIPS_mode() was used to test for FIPS being enabled.  The last
     * upstream OpenSSL version before 3.0 which supported FIPS was 1.0.2, but
     * there are forks of 1.1.1 which are FIPS validated so we still need to
     * test with FIPS_mode() even though we don't support 1.0.2.
     */
    fips_enabled =
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
        EVP_default_properties_is_fips_enabled(NULL);
#else
        FIPS_mode();
#endif
 
    return (fips_enabled == 1);
}

Referenced by CheckBuiltinCryptoMode(), and pg_check_fipsmode().

◆ px_debug()

void px_debug	(	const char *	fmt,
			...
	)

◆ px_find_cipher()

int px_find_cipher	(	const char *	name,
		PX_Cipher **	res
	)

Definition at line 776 of file openssl.c.

{
    const struct ossl_cipher_lookup *i;
    PX_Cipher  *c = NULL;
    EVP_CIPHER_CTX *ctx;
    OSSLCipher *od;
 
    name = px_resolve_alias(ossl_aliases, name);
    for (i = ossl_cipher_types; i->name; i++)
        if (strcmp(i->name, name) == 0)
            break;
    if (i->name == NULL)
        return PXE_NO_CIPHER;
 
    ResourceOwnerEnlarge(CurrentResourceOwner);
 
    /*
     * Create an OSSLCipher object, an EVP_CIPHER_CTX object and a PX_Cipher.
     * The order is crucial, to make sure we don't leak anything on
     * out-of-memory or other error.
     */
    od = MemoryContextAllocZero(TopMemoryContext, sizeof(*od));
    od->ciph = i->ciph;
 
    /* Allocate an EVP_CIPHER_CTX object. */
    ctx = EVP_CIPHER_CTX_new();
    if (!ctx)
    {
        pfree(od);
        return PXE_CIPHER_INIT;
    }
 
    od->evp_ctx = ctx;
    od->owner = CurrentResourceOwner;
    ResourceOwnerRememberOSSLCipher(od->owner, od);
 
    if (i->ciph->cipher_func)
        od->evp_ciph = i->ciph->cipher_func();
 
    /* The PX_Cipher is allocated in current memory context */
    c = palloc(sizeof(*c));
    c->block_size = gen_ossl_block_size;
    c->key_size = gen_ossl_key_size;
    c->iv_size = gen_ossl_iv_size;
    c->free = gen_ossl_free;
    c->init = od->ciph->init;
    c->encrypt = gen_ossl_encrypt;
    c->decrypt = gen_ossl_decrypt;
    c->ptr = od;
 
    *res = c;
    return 0;
}

References OSSLCipher::ciph, CurrentResourceOwner, OSSLCipher::evp_ciph, OSSLCipher::evp_ctx, gen_ossl_block_size(), gen_ossl_decrypt(), gen_ossl_encrypt(), gen_ossl_free(), gen_ossl_iv_size(), gen_ossl_key_size(), i, ossl_cipher::init, MemoryContextAllocZero(), name, ossl_aliases, ossl_cipher_types, OSSLCipher::owner, palloc(), pfree(), px_resolve_alias(), PXE_CIPHER_INIT, PXE_NO_CIPHER, ResourceOwnerEnlarge(), ResourceOwnerRememberOSSLCipher(), and TopMemoryContext.

Referenced by pgp_load_cipher(), and px_find_combo().

◆ px_find_combo()

int px_find_combo	(	const char *	name,
		PX_Combo **	res
	)

Definition at line 285 of file px.c.

{
    int         err;
    char       *buf,
               *s_cipher,
               *s_pad;
 
    PX_Combo   *cx;
 
    cx = palloc0(sizeof(*cx));
    buf = pstrdup(name);
 
    err = parse_cipher_name(buf, &s_cipher, &s_pad);
    if (err)
    {
        pfree(buf);
        pfree(cx);
        return err;
    }
 
    err = px_find_cipher(s_cipher, &cx->cipher);
    if (err)
        goto err1;
 
    if (s_pad != NULL)
    {
        if (strcmp(s_pad, "pkcs") == 0)
            cx->padding = 1;
        else if (strcmp(s_pad, "none") == 0)
            cx->padding = 0;
        else
            goto err1;
    }
    else
        cx->padding = 1;
 
    cx->init = combo_init;
    cx->encrypt = combo_encrypt;
    cx->decrypt = combo_decrypt;
    cx->encrypt_len = combo_encrypt_len;
    cx->decrypt_len = combo_decrypt_len;
    cx->free = combo_free;
 
    pfree(buf);
 
    *res = cx;
 
    return 0;
 
err1:
    if (cx->cipher)
        px_cipher_free(cx->cipher);
    pfree(cx);
    pfree(buf);
    return PXE_NO_CIPHER;
}

References buf, combo_decrypt(), combo_decrypt_len(), combo_encrypt(), combo_encrypt_len(), combo_free(), combo_init(), cx(), err(), name, palloc0(), parse_cipher_name(), pfree(), pstrdup(), px_cipher_free, px_find_cipher(), and PXE_NO_CIPHER.

Referenced by pg_decrypt(), pg_decrypt_iv(), pg_encrypt(), and pg_encrypt_iv().

◆ px_find_digest()

int px_find_digest	(	const char *	name,
		PX_MD **	res
	)

Definition at line 161 of file openssl.c.

{
    const EVP_MD *md;
    EVP_MD_CTX *ctx;
    PX_MD      *h;
    OSSLDigest *digest;
 
    md = EVP_get_digestbyname(name);
    if (md == NULL)
        return PXE_NO_HASH;
 
    ResourceOwnerEnlarge(CurrentResourceOwner);
 
    /*
     * Create an OSSLDigest object, an OpenSSL MD object, and a PX_MD object.
     * The order is crucial, to make sure we don't leak anything on
     * out-of-memory or other error.
     */
    digest = MemoryContextAlloc(TopMemoryContext, sizeof(*digest));
 
    ctx = EVP_MD_CTX_create();
    if (!ctx)
    {
        pfree(digest);
        return PXE_CIPHER_INIT;
    }
    if (EVP_DigestInit_ex(ctx, md, NULL) == 0)
    {
        EVP_MD_CTX_destroy(ctx);
        pfree(digest);
        return PXE_CIPHER_INIT;
    }
 
    digest->algo = md;
    digest->ctx = ctx;
    digest->owner = CurrentResourceOwner;
    ResourceOwnerRememberOSSLDigest(digest->owner, digest);
 
    /* The PX_MD object is allocated in the current memory context. */
    h = palloc(sizeof(*h));
    h->result_size = digest_result_size;
    h->block_size = digest_block_size;
    h->reset = digest_reset;
    h->update = digest_update;
    h->finish = digest_finish;
    h->free = digest_free;
    h->p.ptr = digest;
 
    *res = h;
    return 0;
}

References OSSLDigest::algo, px_digest::block_size, OSSLDigest::ctx, CurrentResourceOwner, digest_block_size(), digest_finish(), digest_free(), digest_reset(), digest_result_size(), digest_update(), px_digest::finish, px_digest::free, MemoryContextAlloc(), name, OSSLDigest::owner, px_digest::p, palloc(), pfree(), px_digest::ptr, PXE_CIPHER_INIT, PXE_NO_HASH, px_digest::reset, ResourceOwnerEnlarge(), ResourceOwnerRememberOSSLDigest(), px_digest::result_size, TopMemoryContext, and px_digest::update.

Referenced by pg_digest(), pgp_load_digest(), px_crypt_md5(), and px_find_hmac().

◆ px_find_hmac()

int px_find_hmac	(	const char *	name,
		PX_HMAC **	res
	)

Definition at line 142 of file px-hmac.c.

{
    int         err;
    PX_MD      *md;
    PX_HMAC    *h;
    unsigned    bs;
 
    err = px_find_digest(name, &md);
    if (err)
        return err;
 
    bs = px_md_block_size(md);
    if (bs < 2)
    {
        px_md_free(md);
        return PXE_HASH_UNUSABLE_FOR_HMAC;
    }
 
    h = palloc(sizeof(*h));
    h->p.ipad = palloc(bs);
    h->p.opad = palloc(bs);
    h->md = md;
 
    h->result_size = hmac_result_size;
    h->block_size = hmac_block_size;
    h->reset = hmac_reset;
    h->update = hmac_update;
    h->finish = hmac_finish;
    h->free = hmac_free;
    h->init = hmac_init;
 
    *res = h;
 
    return 0;
}

References px_hmac::block_size, err(), px_hmac::finish, px_hmac::free, hmac_block_size(), hmac_finish(), hmac_free(), hmac_init(), hmac_reset(), hmac_result_size(), hmac_update(), px_hmac::init, px_hmac::ipad, px_hmac::md, name, px_hmac::opad, px_hmac::p, palloc(), px_find_digest(), px_md_block_size, px_md_free, PXE_HASH_UNUSABLE_FOR_HMAC, px_hmac::reset, px_hmac::result_size, and px_hmac::update.

Referenced by pg_hmac().

◆ px_memset()

void px_memset	(	void *	ptr,
		int	c,
		size_t	len
	)

Definition at line 123 of file px.c.

{
    memset(ptr, c, len);
}

References len.

Referenced by _crypt_blowfish_rn(), calc_key_id(), calc_s2k_iter_salted(), calc_s2k_salted(), calc_s2k_simple(), check_key_sha1(), clear_and_pfree(), combo_free(), copy_crlf(), create_secmsg(), encrypt_free(), hmac_finish(), hmac_free(), hmac_init(), mbuf_free(), mdc_finish(), mdc_flush(), mdcbuf_finish(), mdcbuf_free(), pad_eme_pkcs1_v15(), parse_literal_data(), parse_symenc_sesskey(), pgp_cfb_free(), pgp_free(), pgp_key_free(), pgp_mpi_free(), pkt_stream_free(), pktreader_free(), prefix_init(), pullf_free(), pullf_read_max(), pushf_free(), px_crypt_md5(), px_gen_salt(), write_prefix(), and write_symenc_sesskey().

◆ px_resolve_alias()

const char * px_resolve_alias	(	const PX_Alias *	list,
		const char *	name
	)

Definition at line 129 of file px.c.

{
    while (list->name)
    {
        if (pg_strcasecmp(list->alias, name) == 0)
            return list->name;
        list++;
    }
    return name;
}

References sort-test::list, name, and pg_strcasecmp().

Referenced by px_find_cipher().

◆ px_set_debug_handler()

void px_set_debug_handler ( void(*)(const char *) handler )

Definition at line 143 of file px.c.

{
    debug_handler = handler;
}

References debug_handler.

Referenced by decrypt_internal(), encrypt_internal(), and init_work().

◆ px_strerror()

const char * px_strerror ( int err )

Definition at line 111 of file px.c.

{
    const struct error_desc *e;
 
    for (e = px_err_list; e->desc; e++)
        if (e->err == err)
            return e->desc;
    return "Bad error code";
}

References error_desc::desc, err(), and px_err_list.

Referenced by find_provider(), pg_decrypt(), pg_decrypt_iv(), pg_encrypt(), pg_encrypt_iv(), pg_gen_salt(), pg_gen_salt_rounds(), and px_THROW_ERROR().

◆ px_THROW_ERROR()

pg_noreturn void px_THROW_ERROR ( int err )

Definition at line 93 of file px.c.

{
    if (err == PXE_NO_RANDOM)
    {
        ereport(ERROR,
                (errcode(ERRCODE_INTERNAL_ERROR),
                 errmsg("could not generate a random number")));
    }
    else
    {
        /* For other errors, use the message from the above list. */
        ereport(ERROR,
                (errcode(ERRCODE_EXTERNAL_ROUTINE_INVOCATION_EXCEPTION),
                 errmsg("%s", px_strerror(err))));
    }
}

References ereport, err(), errcode(), errmsg(), ERROR, px_strerror(), and PXE_NO_RANDOM.

Referenced by decrypt_internal(), encrypt_internal(), init_work(), pg_dearmor(), pg_random_bytes(), pgp_armor_headers(), and pgp_key_id_w().

Variable Documentation

◆ builtin_crypto_enabled

int builtin_crypto_enabled

extern

Definition at line 59 of file pgcrypto.c.

Referenced by _PG_init(), and CheckBuiltinCryptoMode().

Data Structures

Macros

Typedefs

Enumerations

Functions

Variables

Macro Definition Documentation

◆ px_cipher_block_size

◆ px_cipher_decrypt

◆ px_cipher_encrypt

◆ px_cipher_free

◆ px_cipher_init

◆ px_cipher_iv_size

◆ px_cipher_key_size

◆ px_combo_decrypt

◆ px_combo_decrypt_len

◆ px_combo_encrypt

◆ px_combo_encrypt_len

◆ px_combo_free

◆ px_combo_init

◆ PX_DEBUG

◆ px_hmac_block_size

◆ px_hmac_finish

◆ px_hmac_free

◆ px_hmac_init

◆ px_hmac_reset

◆ px_hmac_result_size

◆ px_hmac_update

◆ PX_MAX_SALT_LEN

◆ px_md_block_size

◆ px_md_finish

◆ px_md_free

◆ px_md_reset

◆ px_md_result_size

◆ px_md_update

◆ PXE_ARGUMENT_ERROR

◆ PXE_BAD_FORMAT

◆ PXE_BAD_OPTION

◆ PXE_BAD_SALT_ROUNDS

◆ PXE_BUG

◆ PXE_CIPHER_INIT

◆ PXE_DECRYPT_FAILED

◆ PXE_ENCRYPT_FAILED

◆ PXE_HASH_UNUSABLE_FOR_HMAC

◆ PXE_KEY_TOO_BIG

◆ PXE_NO_CIPHER

◆ PXE_NO_HASH

◆ PXE_NO_RANDOM

◆ PXE_OK

◆ PXE_PGP_BAD_S2K_MODE

◆ PXE_PGP_COMPRESSION_ERROR

◆ PXE_PGP_CORRUPT_ARMOR

◆ PXE_PGP_CORRUPT_DATA

◆ PXE_PGP_EXPECT_PUBLIC_KEY

◆ PXE_PGP_EXPECT_SECRET_KEY

◆ PXE_PGP_KEYPKT_CORRUPT

◆ PXE_PGP_MATH_FAILED

◆ PXE_PGP_MULTIPLE_KEYS

◆ PXE_PGP_MULTIPLE_SUBKEYS

◆ PXE_PGP_NEED_SECRET_PSW

◆ PXE_PGP_NO_USABLE_KEY

◆ PXE_PGP_NOT_TEXT

◆ PXE_PGP_NOT_V4_KEYPKT

◆ PXE_PGP_SHORT_ELGAMAL_KEY

◆ PXE_PGP_UNEXPECTED_PKT

◆ PXE_PGP_UNKNOWN_PUBALGO

◆ PXE_PGP_UNSUPPORTED_CIPHER

◆ PXE_PGP_UNSUPPORTED_COMPR

◆ PXE_PGP_UNSUPPORTED_HASH

◆ PXE_PGP_UNSUPPORTED_PUBALGO

◆ PXE_PGP_WRONG_KEY

◆ PXE_UNKNOWN_SALT_ALGO

Typedef Documentation

◆ BuiltinCryptoOptions

◆ PX_Alias

◆ PX_Cipher

◆ PX_Combo

◆ PX_HMAC

◆ PX_MD

Enumeration Type Documentation