5 Commits

Author	SHA1	Message	Date
Sergei Golubchik	7bd2f20e88	make encrypt-binlog and encrypt-tmp-files to fail if no encryption ... --encrypt-binlog and --encrypt-tmp-files used to mean "encrypt XXX if encryption is available, otherwise don't encrypt", now they mean "encrypt or fail with an error".	2015-09-09 14:22:22 +02:00
Sergei Golubchik	66b9a9409c	New encryption API. Piece-wise encryption. ... Instead of encrypt(src, dst, key, iv) that encrypts all data in one go, now we have encrypt_init(key,iv), encrypt_update(src,dst), and encrypt_finish(dst). This also causes collateral changes in the internal my_crypt.cc encryption functions and in the encryption service. There are wrappers to provide the old all-at-once encryption functionality. But binlog events are often written piecewise, they'll need the new api.	2015-09-04 10:33:50 +02:00
Sergei Golubchik	ebc5e00641	my_aes_get_size() ... return unsigned, not signed. return a value large enough for GCM	2015-06-02 19:00:23 +02:00
Sergei Golubchik	432b78c903	just like tempfiles: use key id 2 for temp Aria tables ... introduce ENCRYPTION_KEY_SYSTEM_DATA and ENCRYPTION_KEY_TEMPORARY_DATA constants; use them everywhere.	2015-06-02 18:53:37 +02:00
Sergei Golubchik	d9340d6c8e	MDEV-8126 encryption for temp files ... IO_CACHE tempfiles encryption	2015-06-02 18:53:37 +02:00