On 11/19/2015 08:40 PM, Dimitry Sibiryakov wrote:
>     Hello, All.
>
>     I've finished some modifications in database encryption system:
>
>     Crypt plugin interface was made simpler.

Yes, and as the result key is passed from holder to crypt plugin via 
open source code. As it was reasonably suggested by Vlad our code should 
better never touch keys at all. You've broken that.

>     Database id generated at creation time is provided to it.

That's good.

>     Key holder interface was made simpler.
>     Management of key holders was moved to Y-valve that enabled using of 
> client-side key
> holders.

I've explained in devel why client side key holder, though looking nice 
at first look, is bad thing.

>     Default key holder allows to use application-defined key callback 
> out-of-box.

After your simplification of interface that makes sense.


------------------------------------------------------------------------------
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to