Conrad Ludgate d5304337cf proxy: simplify password validation (#7188) ...

## Problem

for HTTP/WS/password hack flows we imitate SCRAM to validate passwords.
This code was unnecessarily complicated.

## Summary of changes

Copy in the `pbkdf2` and 'derive keys' steps from the
`postgres_protocol` crate in our `rust-postgres` fork. Derive the
`client_key`, `server_key` and `stored_key` from the password directly.
Use constant time equality to compare the `stored_key` and `server_key`
with the ones we are sent from cplane.

2024-03-21 13:54:06 +00:00

..

exchange.rs

proxy: simplify password validation (#7188)

2024-03-21 13:54:06 +00:00

key.rs

proxy: use postgres_protocol scram/sasl code (#4748)

2024-02-19 12:54:17 +00:00

messages.rs

chore: clippies introduced with rust 1.68 (#3781)

2023-03-14 15:29:02 +02:00

secret.rs

proxy: async aware password validation (#7176)

2024-03-21 11:58:41 +01:00

signature.rs

[proxy] Add SCRAM auth mechanism implementation (#1050)

2022-04-13 03:00:32 +03:00