According to https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_connection_phase_authentication_methods_native_password_authentication.html
the response challenge should be 20 bytes long.
However when I observe the packet Workbench, sends, it appears to be 32 bytes long.
Similar to this:
Other clients, such as Navicat appear to send 20 bytes (which is what I'd expect). Similar to this:
Why does this discrepancy exist? Is it something to do with the Hex() function that this document mentions:
How would you convert from the 20 byte format to the 32 byte format?