Marko Kreen <[EMAIL PROTECTED]> writes:
> There is a signedness bug in Openwall gen_salt code that
> pgcrypto uses.  This makes the salt space for md5 and xdes
> algorithms a lot smaller.

> Salts for blowfish and standard des are unaffected.

> Attached is upstream fix for it.  This applies all the
> way from 7.2 to 8.1 and HEAD.  Please apply this to all
> active branches.

Applied back to 7.3 ... we are not maintaining 7.2 anymore.

                        regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?

               http://archives.postgresql.org

Reply via email to