Re: Using pgcrypto with AES-256 bits?

On 5/1/05, Stas Oskin <stas(at)neo(dot)co(dot)il> wrote:
> I tried the pgcrypto contrib module with the AES default encryption. It
> works pretty nice, but I understand that it's using 128 bit key strength. Is
> there any built-in support for the 256 bit key strength? Or it should be
> used via external libraries?

Key will be upward zero-padded to nearest supported key length.
AES supports 3 key lengths: 128, 192 and 256 bits.
So simply give the encrypt() function 256-bit key.

> AFAIK, the support of mhash and mcrypt was dropped from the recent version
> of the module, so the AES 256 functionality can be only provided by OpenSSL?

Builtin AES supports 256-bit keys too.

--
marko