Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Rotate WAL internal key on server start

Description

CTR encryption is vulnerable to reuse of keys.

How to document

None

How to test

Check if WAL encryption still works even after a restart. And to make sure a rotation actually probably happened you could look at the contents of the key map file.

Activity

Show:

mohit.joshi 2 days ago

Partially verified. I am able to see rotated WAl keys in the map file. However, there are failures with WAL encryption ON/FF and server restarts due to open bugs and

Marking this ticket as fixed and resolved.

andreas.karlsson March 12, 2025 at 3:12 PM

Here is a PoC.

Done

Details

Assignee

Reporter

Labels

Story Points

Components

Sprint

Fix versions

Priority

Smart Checklist

Created March 12, 2025 at 3:05 PM
Updated 2 days ago
Resolved 2 days ago