MySQL Forums
Forum List  »  Security

Advanced Search
New Topic

Re: Native authentication - response challenge 32 bytes
Posted by: Georgi Kodinov
Date: September 11, 2021 04:40AM

Not sure what you mean. Look at https://github.com/mysql/mysql-server/blob/beb865a960b9a8a16cf999c323e46c5b0c67f21f/sql/auth/sql_authentication.cc#L3938.

It sends 20 bytes of scramble. The constant is defined here: https://github.com/mysql/mysql-server/blob/beb865a960b9a8a16cf999c323e46c5b0c67f21f/include/mysql_com.h#L116

However the reply is (usually) embedded into the client hello packet (https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_connection_phase_packets_protocol_handshake_response.html#sect_protocol_connection_phase_packets_protocol_handshake_response41) that does contain other things as well.

Georgi "Joro" Kodinov
MySQL SrvGen team lead
Plovdiv, Bulgaria

Navigate: Previous Message• Next Message
Options: Reply• Quote


Subject
Views
Written By
Posted
Native authentication - response challenge 32 bytes
943
Andrew Gee
March 10, 2021 09:35AM
Re: Native authentication - response challenge 32 bytes
429
Georgi Kodinov
September 11, 2021 04:40AM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.