Re: SCRAM authentication, take three

Michael Paquier <michael.paquier@gmail.com>

From: Michael Paquier <michael.paquier@gmail.com>
To: Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>
Cc: a.alekseev@postgrespro.ru, Heikki Linnakangas <hlinnaka@iki.fi>, Alvaro Herrera <alvherre@2ndquadrant.com>, PostgreSQL mailing lists <pgsql-hackers@postgresql.org>
Date: 2017-03-06T02:54:59Z
Lists: pgsql-hackers

Attachments

On Mon, Mar 6, 2017 at 11:50 AM, Michael Paquier
<michael.paquier@gmail.com> wrote:
> On Fri, Mar 3, 2017 at 2:43 PM, Michael Paquier
> <michael.paquier@gmail.com> wrote:
>> I am attaching 0009 and 0010 that address those problems (pushed on
>> github as well) that can be applied on top of the latest set.
>
> While doing more tests with my module able to do SASLprep, I have
> noticed that calculations related to Hangul characters were incorrect:
>  /* Constants for calculations wih Hangul characters */
> -#define SBASE      0xAC00
> -#define LBASE      0x1100
> -#define VBASE      0x1161
> -#define TBASE      0x11A7
> +#define SBASE      0xEAB080    /* U+AC00 */
> +#define LBASE      0xE18480    /* U+1100 */
> +#define VBASE      0xE185A1    /* U+1161 */
> +#define TBASE      0xE186A7    /* U+11A7 */

Here is as well an extra patch with this set of fixes, to be applied
on top of the rest. Those are on my github as well, that's for the
archive's sake, and that's better than sending a full set of patches
again.
-- 
Michael

Commits

  1. Rename "scram" to "scram-sha-256" in pg_hba.conf and password_encryption.

  2. Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).