Mariadb crashes when calling verify #1
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Hi there.
Have you tested this in latest mariadb?
I get a brutal mariadb crash whenever I try to run verify and I think it's because the argon2 upstream library is no longer maintained and has issues.
Hello and sorry for the delayed response. This library hasn't been tested against newer versions of MariaDB, so there may be an API change that created an incompatibility. Since MariaDB loads plugins using dynamic linking, it's absolutely possible that a minor API incompatibility could unfortunately snowball into a daemon crash. I'm finishing up my midterms for university, so I can't give this issue the attention it deserves for a couple more days. I'll let you know what I find after taking a look.
Regarding the upstream library, this library implements bindings to Argon2's reference implementation. Cryptographic reference implementations are generally not updated except when doing so yields a major security or performance gain. One reason for this pattern is the high burden of proof on the authors to provide a provably secure implementation of the underlying algorithm which can be linked with or referenced in the writing of other implementations. Thus, these reference implementations don't often see frequent, small releases and can remain untouched for years once shown to be secure and performant under scrutiny. See this KeePassium issue for more relevant discussion on the subject.