I just would like to support Vlad solution. It's enough to crypt well known data and decrypt it by provided key. If result is not well known data -> key is bad. It's not necessary to apply that key for the database pages and get surprises as well as not necessary to validate every page. It's another question where to store such validation data. Just clumplet on header page? New version will use it, old just skip.
2015-11-09 18:04 GMT+03:00 Alex Peshkoff <peshk...@mail.ru>: > On 11/07/2015 07:16 PM, Adriano dos Santos Fernandes wrote: >> Em 07/11/2015 13:11, Dimitry Sibiryakov escreveu: >>> 07.11.2015 15:57, Vlad Khorsun wrote: >>>> I'd say it will be good to have ability to validate encryption key >>>> when >>>> it is passed into the engine. I.e. not at every page read >>> Say, a malefactor has algorithm, but not a key (which is usual >>> situation in OSS world). >>> In this case it is easy to forge a key that pass validation but still crash >>> the server. >>> >> It should not crash even for non-encrypted non-database files. That is >> the problem needing to be fixed then. > > After fixing some deadlock (will commit soon) I have in that case on > release build > > bin # ./isql employee > Statement failed, SQLSTATE = XX000 > internal Firebird consistency check (decompression overran buffer (179), > file: sqz.cpp line: 282) > Use CONNECT or CREATE DATABASE to specify a database > SQL> > > > > ------------------------------------------------------------------------------ > Presto, an open source distributed SQL query engine for big data, initially > developed by Facebook, enables you to easily query your data on Hadoop in a > more interactive manner. Teradata is also now providing full enterprise > support for Presto. Download a free open source copy now. > http://pubads.g.doubleclick.net/gampad/clk?id=250295911&iu=/4140 > Firebird-Devel mailing list, web interface at > https://lists.sourceforge.net/lists/listinfo/firebird-devel -- Roman Simakov ------------------------------------------------------------------------------ Presto, an open source distributed SQL query engine for big data, initially developed by Facebook, enables you to easily query your data on Hadoop in a more interactive manner. Teradata is also now providing full enterprise support for Presto. Download a free open source copy now. http://pubads.g.doubleclick.net/gampad/clk?id=250295911&iu=/4140 Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel
