On 04/21/2017 05:33 PM, Simon Riggs wrote:
On 21 April 2017 at 14:42, Heikki Linnakangas <hlinn...@iki.fi> wrote:

SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey>

Could you explain where you are looking? I don't see that in RFC5803

>From 1.  Overview:

Yeah, it's not easy to see, I missed it earlier too. You have to look at RFC 5803 and RFC 3112 together. RFC 3112 says that the overall format is 
"<scheme>$<authInfo>$<authValue>", and RFC5803 says that for SCRAM, scheme is "SCRAM-SHA-256" (for our variant), authInfo 
is "<iteration count>:<salt>" and authValue is "<StoredKey>:<ServerKey>"

They really should've included examples in those RFCs.


+1 for change

Committed, thanks.

- Heikki

Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:

Reply via email to