auth

func CheckPassword ¶

func CheckPassword(salt [4]byte, pwd, authentication string) bool

CheckPassword

SERVER:  salt = create_random_salt()
		 send(salt)
CLIENT:  recv(salt)
		 md5_stage1 = md5Sum(password + user)
		 md5_stage2 = md5Sum(md5_stage1 + salt)
		 reply = "md5" + md5_stage2
SERVER:  recv(reply)
		 server_md5_stage1 = md5Sum(password + user)
		 server_md5_stage2 = md5Sum(server_md5_stage1 + salt)
		 check(reply == "md5" + server_md5_stage2))

The password saved by the server is "md5" + server_md5_stage1, so you can get server_md5_stage1 directly

func CheckScrambledPassword ¶

func CheckScrambledPassword(salt, hpwd, auth []byte) bool

CheckScrambledPassword check scrambled password received from client. The new authentication is performed in following manner:

SERVER:  public_seed=create_random_string()
         send(public_seed)
CLIENT:  recv(public_seed)
         hash_stage1=sha1("password")
         hash_stage2=sha1(hash_stage1)
         reply=xor(hash_stage1, sha1(public_seed,hash_stage2)
         // this three steps are done in scramble()
         send(reply)
SERVER:  recv(reply)
         hash_stage1=xor(reply, sha1(public_seed,hash_stage2))
         candidate_hash2=sha1(hash_stage1)
         check(candidate_hash2==hash_stage2)
         // this three steps are done in check_scramble()

func DecodePassword ¶

func DecodePassword(pwd string) ([]byte, error)

DecodePassword converts hex string password without prefix '*' to byte array.

func DecodePasswordByMD5 ¶

func DecodePasswordByMD5(pwd string) (string, error)

DecodePasswordByMD5 remove prefix "md5"

func EncodePassword ¶

func EncodePassword(pwd string) string

EncodePassword converts plaintext password to hashed hex string.

func EncodePasswordByMD5 ¶

func EncodePasswordByMD5(user string, pwd string) string

EncodePasswordByMD5 PostgreSQL encode password by md5

func Sha1Hash ¶

func Sha1Hash(bs []byte) []byte

Sha1Hash is an util function to calculate sha1 hash.