SHA256
authentication possible exchanges:
if connection use SSL (SSLRequest Packet sent):
Client sends a clear password answer.
Else:
If client doesn't know server RSA public key:
Client sends a public key request.
Server sends a public key response.
Client sends an RSA encrypted password.
Ends with server sending either OK_Packet , ERR_Packet.
string password without encryption.
byte<1> fixed 0x01
value.
byte<256> RSA encrypted password.
RSA encrypted value of XOR
(password, seed) using server public key (RSA_PKCS1_OAEP_PADDING
).
This page is licensed: CC BY-SA / Gnu FDL