Re: How to interpret the salt sent in the AuthenticationMD5Password message from the server. - Mailing list pgsql-docs

From Tom Lane
Subject Re: How to interpret the salt sent in the AuthenticationMD5Password message from the server.
Date
Msg-id 3307.1600284172@sss.pgh.pa.us
Whole thread Raw
In response to How to interpret the salt sent in the AuthenticationMD5Password message from the server.  (PG Doc comments form <noreply@postgresql.org>)
List pgsql-docs
PG Doc comments form <noreply@postgresql.org> writes:
> In short, what is the format of the salt sent to the server?

I think you might have a conceptual error here.  The salt is sent
from the server to you, not the other way around.  It's just four
random bytes in the AuthenticationMD5Password message, which I'm
pretty sure you should incorporate verbatim in your MD5 input.

The bytes are just binary data, they're not ASCII or encoded
in some way.

            regards, tom lane



pgsql-docs by date:

Previous
From: PG Doc comments form
Date:
Subject: How to interpret the salt sent in the AuthenticationMD5Password message from the server.
Next
From: PG Doc comments form
Date:
Subject: Magic number for SSLRequest