1 of 1

Connecting via sha256_password

The sha256_password plugin manages authentication using SHA-256 encryption, supporting both clear text passwords over SSL and RSA encrypted password exchange.

Overview

SHA256 authentication possible exchanges:

if connection use SSL (SSLRequest Packet sent):
- Client sends a .
Else:
- If client doesn't know server RSA public key:
  - Client sends a .
  - Server sends a .

Authentication

Client Clear Password Answer

password without encryption.

Public key request

fixed 0x01 value.

Public key response

fixed 0x01 value.
public key data.

RSA encrypted password

RSA encrypted password.

RSA encrypted value of XOR(password, seed) using server public key (RSA_PKCS1_OAEP_PADDING).

_{This page is licensed: CC BY-SA / Gnu FDL}