MySQL Forums
Forum List  »  Security

Re: Native authentication - response challenge 32 bytes
Posted by: Georgi Kodinov
Date: September 11, 2021 04:40AM

Not sure what you mean. Look at https://github.com/mysql/mysql-server/blob/beb865a960b9a8a16cf999c323e46c5b0c67f21f/sql/auth/sql_authentication.cc#L3938.

It sends 20 bytes of scramble. The constant is defined here: https://github.com/mysql/mysql-server/blob/beb865a960b9a8a16cf999c323e46c5b0c67f21f/include/mysql_com.h#L116

However the reply is (usually) embedded into the client hello packet (https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_connection_phase_packets_protocol_handshake_response.html#sect_protocol_connection_phase_packets_protocol_handshake_response41) that does contain other things as well.

Georgi "Joro" Kodinov
MySQL SrvGen team lead
Plovdiv, Bulgaria

Options: ReplyQuote


Subject
Views
Written By
Posted
Re: Native authentication - response challenge 32 bytes
64
September 11, 2021 04:40AM


Sorry, only registered users may post in this forum.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.