summaryrefslogtreecommitdiff
path: root/doc/src
diff options
context:
space:
mode:
Diffstat (limited to 'doc/src')
-rw-r--r--doc/src/sgml/pgcrypto.sgml8
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/src/sgml/pgcrypto.sgml b/doc/src/sgml/pgcrypto.sgml
index b0ee4c1e734..b6be0a7e345 100644
--- a/doc/src/sgml/pgcrypto.sgml
+++ b/doc/src/sgml/pgcrypto.sgml
@@ -1244,6 +1244,14 @@ gen_random_uuid() returns uuid
<para>
If you cannot, then better do crypto inside client application.
</para>
+
+ <para>
+ The implementation does not resist
+ <ulink url="http://en.wikipedia.org/wiki/Side-channel_attack">side-channel
+ attacks</ulink>. For example, the time required for
+ a <filename>pgcrypto</> decryption function to complete varies among
+ ciphertexts of a given size.
+ </para>
</sect3>
<sect3>