Horton

Re: Channel binding for post-quantum cryptography

Filip Janus <fjanus@redhat.com>

View thread
From: Filip Janus <fjanus@redhat.com>
To: Nico Williams <nico@cryptonector.com>
Cc: Pgsql Hackers <pgsql-hackers@postgresql.org>
Date: 2025-10-30T10:39:38Z
Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

  1. Fix handling of SCRAM-SHA-256's channel binding with RSA-PSS certificates

Thank you for posting it there. If I understand correctly, the resolution
should be to use internal hash algorithms — in this case, SHAKE.
Now, the question is whether to wait for the implementation of a public API
to make the change as general as possible, or to try implementing it on the
PG side?

    -Filip-


st 29. 10. 2025 v 6:17 odesílatel Nico Williams <nico@cryptonector.com>
napsal:

> I posted (including your attachment, by accident, since at first I was
> going to forward your post) about this to the IETF TLS WG mailing list.
>
> https://mailarchive.ietf.org/arch/msg/tls/CEaZg1l-4iVg0_wdEr5_rXfGYWc/
>
>