Skip to content

Commit 0870f12

Browse files
committed
PS-9139 Document new PS Encryption UDFs functionality - 8.0
modified: docs/encryption-functions.md
1 parent 6abbdae commit 0870f12

File tree

1 file changed

+15
-2
lines changed

1 file changed

+15
-2
lines changed

docs/encryption-functions.md

+15-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,20 @@
1-
# Encryption functions
1+
# Encryption user-defined functions
22

33
Percona Server for MySQL 8.0.28-20 adds encryption functions and variables to manage the encryption range. The functions may take an algorithm argument. Encryption converts plaintext into ciphertext using a key and an encryption algorithm.
44

5+
## Version updates
6+
7+
Percona Server for MySQL 8.0.40 adds the following:
8+
9+
* Support for `PKCS1 OAEP` padding for RSA encrypt / decrypt operations
10+
11+
<details>
12+
<summary> `PKCS1 OAEP` padding</summary>
13+
PKCS1 OAEP (Optimal Asymmetric Encryption Padding) is a cryptographic technique used to add randomness to a message before encryption. This randomness helps to increase the security of the encrypted message.
14+
15+
OAEP padding adds a layer of security by making it more difficult for attackers to exploit weaknesses in the encryption algorithm or to recover the original message.
16+
</details>
17+
518
You can also use the user-defined functions with the PEM format keys generated externally by the OpenSSL utility.
619

720
A digest uses plaintext and generates a hash value. This hash value can verify if the plaintext is unmodified. You can also sign or verify on digests to ensure that the original plaintext was not modified. You cannot decrypt the original text from the hash value.
@@ -64,7 +77,7 @@ A plaintext as a string.
6477

6578
The following are the function’s parameters:
6679

67-
* algorithm - the encryption algorithm supports RSA to decrypt the string.
80+
* algorithm - the encryption algorithm supports RSA to decrypt the string. Percona Server for MySQL 8.0.40 added support for PKCS1 OAEP padding for RSA encrypt operations
6881

6982
* key_str - a string in the PEM format. The key string must have the following attributes:
7083

0 commit comments

Comments
 (0)