1
/* - mode: c; c-basic-offset: 2; indent-tabs-mode: nil; -*-
2
* vim:expandtab:shiftwidth=2:tabstop=2:smarttab:
4
* Copyright (C) 2008 Sun Microsystems, Inc.
6
* This program is free software; you can redistribute it and/or modify
7
* it under the terms of the GNU General Public License as published by
8
* the Free Software Foundation; version 2 of the License.
10
* This program is distributed in the hope that it will be useful,
11
* but WITHOUT ANY WARRANTY; without even the implied warranty of
12
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13
* GNU General Public License for more details.
15
* You should have received a copy of the GNU General Public License
16
* along with this program; if not, write to the Free Software
17
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
/* password checking routines */
21
/*****************************************************************************
22
The main idea is that no password are sent between client & server on
23
connection and that no password are saved in mysql in a decodable form.
25
On connection a random string is generated and sent to the client.
26
The client generates a new string with a random generator inited with
27
the hash values from the password and the sent string.
28
This 'check' string is sent to the server where it is compared with
29
a string generated from the stored hash_value of the password and the
32
The password is saved (in user.password) by using the PASSWORD() function in
35
This is .c file because it's used in libmysqlclient, which is entirely in C.
36
(we need it to be portable to a variety of systems).
38
update user set password=PASSWORD("hello") where user="test"
39
This saves a hashed number as a string in the password field.
41
The new authentication is performed in following manner:
43
SERVER: public_seed=drizzleclient_create_random_string()
46
CLIENT: recv(public_seed)
47
hash_stage1=sha1("password")
48
hash_stage2=sha1(hash_stage1)
49
reply=xor(hash_stage1, sha1(public_seed,hash_stage2)
51
// this three steps are done in scramble()
57
hash_stage1=xor(reply, sha1(public_seed,hash_stage2))
58
candidate_hash2=sha1(hash_stage1)
59
check(candidate_hash2==hash_stage2)
61
// this three steps are done in check_scramble()
63
*****************************************************************************/
65
#include "libdrizzle_priv.h"
71
/************ MySQL 3.23-4.0 authentication routines: untouched ***********/
74
New (MySQL 3.21+) random generation structure initialization
76
drizzleclient_randominit()
77
rand_st OUT Structure to initialize
78
seed1 IN First initialization parameter
79
seed2 IN Second initialization parameter
82
void drizzleclient_randominit(struct rand_struct *rand_st,
85
{ /* For mysql 3.21.# */
86
memset(rand_st, 0, sizeof(*rand_st)); /* Avoid UMC varnings */
87
rand_st->max_value= 0x3FFFFFFFL;
88
rand_st->max_value_dbl=(double) rand_st->max_value;
89
rand_st->seed1=seed1%rand_st->max_value ;
90
rand_st->seed2=seed2%rand_st->max_value;
95
Generate random number.
97
drizzleclient_my_rnd()
98
rand_st INOUT Structure used for number generation
100
generated pseudo random number
103
static double drizzleclient_my_rnd(struct rand_struct *rand_st)
105
rand_st->seed1=(rand_st->seed1*3+rand_st->seed2) % rand_st->max_value;
106
rand_st->seed2=(rand_st->seed1+rand_st->seed2+33) % rand_st->max_value;
107
return (((double) rand_st->seed1)/rand_st->max_value_dbl);
110
static inline uint8_t char_val(uint8_t X)
112
return (uint32_t) (X >= '0' && X <= '9' ? X-'0' :
113
X >= 'A' && X <= 'Z' ? X-'A'+10 : X-'a'+10);
118
**************** MySQL 4.1.1 authentication routines *************
122
Generate string of printable random characters of requested length
124
drizzleclient_create_random_string()
125
to OUT buffer for generation; must be at least length+1 bytes
126
long; result string is always null-terminated
127
length IN how many random characters to put in buffer
128
rand_st INOUT structure used for number generation
131
void drizzleclient_create_random_string(char *to, uint32_t length, struct rand_struct *rand_st)
133
char *end= to + length;
134
/* Use pointer arithmetics as it is faster way to do so. */
135
for (; to < end; to++)
136
*to= (char) (drizzleclient_my_rnd(rand_st)*94+33);
added
removed
plugin/oldlibdrizzle/password.cc
