mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-12-01 12:01:58 +00:00
b147ffcd43
Functions to encrypt/decrypt any input data with OpenSSL's ciphers
with custom key, iv, and add (-gcm mode only).
_mysql versions are 100% compatitable with corresponding MySQL functions
Supported modes depend on OpenSSL version, but generally are:
aes-{128,192,56}-{ecb,cbc,cfb1,cfb8,cfb128,ofb,gcm}
Please note that in a -gcm mode a 16-byte tag is appended to the ciphertext
on encryption and is expected to be found at the end of ciphertext on decryption.
Added tests that verify compatibility with MySQL functions,
and test vectors for GCM mode from OpenSSL.
Added masking rules for aes_X funtions
Rules are installed by default to config.d/query_masking_rules.xml
81 lines
2.0 KiB
Plaintext
81 lines
2.0 KiB
Plaintext
0
|
|
0
|
|
0
|
|
1
|
|
MySQL-specific key folding and decrpyting
|
|
aes-128-ecb 1
|
|
aes-128-ecb 1
|
|
aes-128-ecb 1
|
|
aes-192-ecb 1
|
|
aes-192-ecb 1
|
|
aes-192-ecb 1
|
|
aes-256-ecb 1
|
|
aes-256-ecb 1
|
|
aes-256-ecb 1
|
|
aes-128-cbc 1
|
|
aes-128-cbc 1
|
|
aes-128-cbc 1
|
|
aes-192-cbc 1
|
|
aes-192-cbc 1
|
|
aes-192-cbc 1
|
|
aes-256-cbc 1
|
|
aes-256-cbc 1
|
|
aes-256-cbc 1
|
|
aes-128-cfb1 1
|
|
aes-128-cfb1 1
|
|
aes-128-cfb1 1
|
|
aes-192-cfb1 1
|
|
aes-192-cfb1 1
|
|
aes-192-cfb1 1
|
|
aes-256-cfb1 1
|
|
aes-256-cfb1 1
|
|
aes-256-cfb1 1
|
|
aes-128-cfb8 1
|
|
aes-128-cfb8 1
|
|
aes-128-cfb8 1
|
|
aes-192-cfb8 1
|
|
aes-192-cfb8 1
|
|
aes-192-cfb8 1
|
|
aes-256-cfb8 1
|
|
aes-256-cfb8 1
|
|
aes-256-cfb8 1
|
|
aes-128-cfb128 1
|
|
aes-128-cfb128 1
|
|
aes-128-cfb128 1
|
|
aes-192-cfb128 1
|
|
aes-192-cfb128 1
|
|
aes-192-cfb128 1
|
|
aes-256-cfb128 1
|
|
aes-256-cfb128 1
|
|
aes-256-cfb128 1
|
|
aes-128-ofb 1
|
|
aes-128-ofb 1
|
|
aes-128-ofb 1
|
|
aes-192-ofb 1
|
|
aes-192-ofb 1
|
|
aes-192-ofb 1
|
|
aes-256-ofb 1
|
|
aes-256-ofb 1
|
|
aes-256-ofb 1
|
|
GCM mode with IV
|
|
aes-128-gcm FB9958E2E897EF3FDB49067B51A24AF6 1
|
|
aes-128-gcm FB9958E2E897EF3FDB49067B51A24AF6 1
|
|
aes-128-gcm FB9958E2E897EF3FDB49067B51A24AF6 1
|
|
aes-192-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1 1
|
|
aes-192-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1 1
|
|
aes-192-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1 1
|
|
aes-256-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1DC7FD4DD71B7E38F 1
|
|
aes-256-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1DC7FD4DD71B7E38F 1
|
|
aes-256-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1DC7FD4DD71B7E38F 1
|
|
GCM mode with IV and AAD
|
|
aes-128-gcm FB9958E2E897EF3FDB49067B51A24AF6 1
|
|
aes-128-gcm FB9958E2E897EF3FDB49067B51A24AF6 1
|
|
aes-128-gcm FB9958E2E897EF3FDB49067B51A24AF6 1
|
|
aes-192-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1 1
|
|
aes-192-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1 1
|
|
aes-192-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1 1
|
|
aes-256-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1DC7FD4DD71B7E38F 1
|
|
aes-256-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1DC7FD4DD71B7E38F 1
|
|
aes-256-gcm FB9958E2E897EF3FDB49067B51A24AF645B3626EED2F9EA1DC7FD4DD71B7E38F 1
|
|
F56E87055BC32D0EEB31B2EACC2BF2A5 1
|