TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Show HN: Pgsodium – A Crytographic PostgreSQL Extension

7 点作者 michelpp超过 3 年前

1 comment

michelpp超过 3 年前
Hey HN, I shared an earlier prototype version of pgsodium but I just released 2.0 and felt this could be a good opportunity to share some updates!<p>[pgsodium](<a href="https:&#x2F;&#x2F;github.com&#x2F;michelp&#x2F;pgsodium" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;michelp&#x2F;pgsodium</a>) 2.0.0 is a postgres extension that uses the [libsodium](<a href="https:&#x2F;&#x2F;doc.libsodium.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;doc.libsodium.org&#x2F;</a>) library to provide high-performance, modern cryptography support for PostgreSQL 10+.<p>2.0.0 includes a ton of new feature and a few bug-fixes:<p>* Support for [XChaCha20-SIV](<a href="https:&#x2F;&#x2F;github.com&#x2F;jedisct1&#x2F;libsodium-xchacha20-siv" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jedisct1&#x2F;libsodium-xchacha20-siv</a>) deterministic nonce-free encryption, this is useful for one-time workflows sacrificing a bit of speed and larger key size without worrying about nonce-handling issues.<p>* Support for [SignCryption](<a href="https:&#x2F;&#x2F;github.com&#x2F;jedisct1&#x2F;libsodium-signcryption" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jedisct1&#x2F;libsodium-signcryption</a>) Sign &amp; Encrypt identity verification. Signcryption goes beyond public key verification to provide identity verification, and negotiating a shared-secret key between two parties to use fast streaming encryption of the payload.<p>* Key id support for HMACSHA 512&#x2F;256, generichash, and shorthash. This extends support for pgsodium&#x27;s key management feature to these useful hash functions.<p>* Support for low level [XChaCha20 streaming](<a href="https:&#x2F;&#x2F;libsodium.gitbook.io&#x2F;doc&#x2F;advanced&#x2F;stream_ciphers&#x2F;xchacha20" rel="nofollow">https:&#x2F;&#x2F;libsodium.gitbook.io&#x2F;doc&#x2F;advanced&#x2F;stream_ciphers&#x2F;xch...</a>). This is if you want to support your own low level algorithms on top of XChaCha20 for example, PASETO.<p>* More tests, docs, and small bug fixes in argument parsing<p>* In-memory key now protected with [sodium\_malloc](<a href="https:&#x2F;&#x2F;libsodium.gitbook.io&#x2F;doc&#x2F;memory_management" rel="nofollow">https:&#x2F;&#x2F;libsodium.gitbook.io&#x2F;doc&#x2F;memory_management</a>), now the key has additional protection from over&#x2F;underflow memory attack.<p>Check it out at:<p>[<a href="https:&#x2F;&#x2F;github.com&#x2F;michelp&#x2F;pgsodium](https:&#x2F;&#x2F;github.com&#x2F;michelp&#x2F;pgsodium)" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;michelp&#x2F;pgsodium](https:&#x2F;&#x2F;github.com&#x2F;mich...</a><p>Please feel free to submit any issues you may have and as usual pull requests are greatly appreciated!
评论 #29903222 未加载