2020-09-10 19:52:42 +00:00
|
|
|
#if !defined(ARCADIA_BUILD)
|
|
|
|
|
# include <Common/config.h>
|
|
|
|
|
#endif
|
encrypt, aes_encrypt_mysql, decrypt, aes_decrypt_mysql functions
Functions to encrypt/decrypt any input data with OpenSSL's ciphers
with custom key, iv, and add (-gcm mode only).
_mysql versions are 100% compatitable with corresponding MySQL functions
Supported modes depend on OpenSSL version, but generally are:
aes-{128,192,56}-{ecb,cbc,cfb1,cfb8,cfb128,ofb,gcm}
Please note that in a -gcm mode a 16-byte tag is appended to the ciphertext
on encryption and is expected to be found at the end of ciphertext on decryption.
Added tests that verify compatibility with MySQL functions,
and test vectors for GCM mode from OpenSSL.
Added masking rules for aes_X funtions
Rules are installed by default to config.d/query_masking_rules.xml
2020-06-16 09:22:55 +00:00
|
|
|
|
|
|
|
|
#if USE_SSL
|
|
|
|
|
|
|
|
|
|
#include <Functions/FunctionFactory.h>
|
|
|
|
|
#include <Functions/FunctionsAES.h>
|
|
|
|
|
|
|
|
|
|
namespace
|
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
struct DecryptMySQLModeImpl
|
|
|
|
|
{
|
|
|
|
|
static constexpr auto name = "aes_decrypt_mysql";
|
|
|
|
|
static constexpr auto compatibility_mode = OpenSSLDetails::CompatibilityMode::MySQL;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
namespace DB
|
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
void registerFunctionAESDecryptMysql(FunctionFactory & factory)
|
|
|
|
|
{
|
|
|
|
|
factory.registerFunction<FunctionDecrypt<DecryptMySQLModeImpl>>();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#endif
|
