Horton

Re: Channel binding for post-quantum cryptography

Nico Williams <nico@cryptonector.com>

View thread
From: Nico Williams <nico@cryptonector.com>
To: Filip Janus <fjanus@redhat.com>
Cc: Pgsql Hackers <pgsql-hackers@postgresql.org>
Date: 2025-10-30T15:32:23Z
Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

  1. Fix handling of SCRAM-SHA-256's channel binding with RSA-PSS certificates

On Thu, Oct 30, 2025 at 11:39:38AM +0100, Filip Janus wrote:
> Thank you for posting it there. If I understand correctly, the resolution
> should be to use internal hash algorithms — in this case, SHAKE.

In this case, yes, it seem the consensus (though it's early to call it)
is SHAKE256.

> Now, the question is whether to wait for the implementation of a public API
> to make the change as general as possible, or to try implementing it on the
> PG side?

If you can wait, wait.  Otherwise if the consensus changes then you'll
be stuck with flag day eventually.