Обсуждение: pgcrypto.gen_random_uuid() or uuid-ossp.uuid_generate_v4()?

Hi all

I consider using uuid as primary key type. The documentation of
uuid-ossp states
(https://www.postgresql.org/docs/10/static/uuid-ossp.html#idm46428633607040)
makes a note to consider the pgcrypto function instead but not why.
Can somebody shed some light on that matter?

Kind regards

Thiemo

--
Öffentlicher PGP-Schlüssel:
http://pgp.mit.edu/pks/lookup?op=get&search=0x8F70EFD2D972CBEF

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

In my testing, gen_random_uuid() is quite a bit faster than uuid_generate_v4().

> In my testing, gen_random_uuid() is quite a bit faster than
> uuid_generate_v4().

Thx for sharing your experience.


--
Öffentlicher PGP-Schlüssel:
http://pgp.mit.edu/pks/lookup?op=get&search=0x8F70EFD2D972CBEF

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Thiemo Kellner <thiemo@gelassene-pferde.biz> writes:
> I consider using uuid as primary key type. The documentation of
> uuid-ossp states
> (https://www.postgresql.org/docs/10/static/uuid-ossp.html#idm46428633607040)
> makes a note to consider the pgcrypto function instead but not why.
> Can somebody shed some light on that matter?

I believe the point of the recommendation is that if you only need type-4
UUIDs, you can get that from pgcrypto without needing the external
dependency of the OSSP UUID library.  This is a bit less urgent than when
that text was written, because now we also support building that contrib
module against some other implementations; but there are still going to
be systems on which installing uuid-ossp is inconvenient.

There may also be a belief that pgcrypto's result is more
cryptographically secure, though I wouldn't swear to that.

            regards, tom lane

Zitat von Tom Lane <tgl@sss.pgh.pa.us>:

> I believe the point of the recommendation is that if you only need type-4
> UUIDs, you can get that from pgcrypto without needing the external
> dependency of the OSSP UUID library.  This is a bit less urgent than when
> that text was written, because now we also support building that contrib
> module against some other implementations; but there are still going to
> be systems on which installing uuid-ossp is inconvenient.
>
> There may also be a belief that pgcrypto's result is more
> cryptographically secure, though I wouldn't swear to that.

Thanks for the light :-)

Kind regards Thiemo


--
Öffentlicher PGP-Schlüssel:
http://pgp.mit.edu/pks/lookup?op=get&search=0x8F70EFD2D972CBEF

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.