Re: [HACKERS] On-disk format of SCRAM verifiers

On 21 April 2017 at 14:42, Heikki Linnakangas <hlinnaka@iki.fi> wrote:

>>>> SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey>
>>>
>>> Could you explain where you are looking? I don't see that in RFC5803
>>
> >From 1.  Overview:
>
> Yeah, it's not easy to see, I missed it earlier too. You have to look at RFC 5803 and RFC 3112 together. RFC 3112
saysthat the overall format is "<scheme>$<authInfo>$<authValue>", and RFC5803 says that for SCRAM, scheme is
"SCRAM-SHA-256"(for our variant), authInfo is "<iteration count>:<salt>" and authValue is "<StoredKey>:<ServerKey>" 
>
> They really should've included examples in those RFCs.

Thanks

+1 for change

--
Simon Riggs                http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services