Re: [HACKERS] Possible problem with pgcrypto

2015-02-06 Thread Jan Wieck
On 02/05/2015 02:15 PM, Jan Wieck wrote: On 02/05/2015 01:18 PM, Marko Tiikkaja wrote: "pgcrypto bug" That doesn't look too good, but I can't reproduce it against 9.3.6 either. Attached is an improved script and the final output from it. I ran it over night and it did not reproduce

Re: [HACKERS] Possible problem with pgcrypto

2015-02-05 Thread Jan Wieck
On 02/05/2015 01:18 PM, Marko Tiikkaja wrote: On 2/5/15 4:48 PM, Jan Wieck wrote: What the script does is to encode a small string with pgp_sym_encrypt() and then repeatedly try to decrypt it with different "wrong" passwords. The expected error message for that is of course "Wrong key or

Re: [HACKERS] Possible problem with pgcrypto

2015-02-05 Thread Jan Wieck
On 02/05/2015 10:58 AM, Tom Lane wrote: Jan Wieck writes: I have encountered a small instability in the behavior of pgcrypto's pgp_sym_decrypt() function. Attached is a script that can reproduce the problem. It may have to be run repeatedly because the symptom occurs rather seldom. What the

Re: [HACKERS] Possible problem with pgcrypto

2015-02-05 Thread Marko Tiikkaja
On 2/5/15 4:48 PM, Jan Wieck wrote: What the script does is to encode a small string with pgp_sym_encrypt() and then repeatedly try to decrypt it with different "wrong" passwords. The expected error message for that is of course "Wrong key or corrupt data". Every now and then, I get a dif

Re: [HACKERS] Possible problem with pgcrypto

2015-02-05 Thread Tom Lane
Jan Wieck writes: > I have encountered a small instability in the behavior of pgcrypto's > pgp_sym_decrypt() function. Attached is a script that can reproduce the > problem. It may have to be run repeatedly because the symptom occurs > rather seldom. > What the script does is to encode a small

[HACKERS] Possible problem with pgcrypto

2015-02-05 Thread Jan Wieck
Hi, I have encountered a small instability in the behavior of pgcrypto's pgp_sym_decrypt() function. Attached is a script that can reproduce the problem. It may have to be run repeatedly because the symptom occurs rather seldom. What the script does is to encode a small string with pgp_sym_e