[DRIVERS-444] Implement SASLPrep Created: 20/Jan/18  Updated: 28/Oct/23  Resolved: 21/Aug/18

Status: Closed
Project: Drivers
Component/s: None
Fix Version/s: None

Type: New Feature Priority: Major - P3
Reporter: Rathi Gnanasekaran Assignee: Rathi Gnanasekaran
Resolution: Fixed Votes: 0
Labels: newdriver
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
depends on CDRIVER-2475 Implement SASLPrep Closed
depends on CSHARP-2160 Implement SASLPrep Closed
depends on CXX-1505 Implement SASLPrep Closed
depends on GODRIVER-210 Implement SASLPrep Closed
depends on JAVA-2759 Implement SASLPrep Closed
depends on MOTOR-191 Implement SASLPrep Closed
depends on NODE-1303 Implement SASLPrep Closed
depends on PHPC-1105 Implement SASLPrep Closed
depends on PYTHON-1457 Implement SASLPrep Closed
depends on RUBY-1289 Implement SASLPrep Closed
depends on RUST-84 Implement SASLPrep Closed
is depended on by DRIVERS-439 SCRAM-SHA-256 Support Closed
Driver Compliance:
Key Status/Resolution FixVersion
CDRIVER-2475 Fixed 1.11.0
NODE-1303 Fixed 3.1.0
SCALA-372 Done 2.4.0
PYTHON-1457 Fixed 3.7
CSHARP-2160 Fixed 2.7.0
RUBY-1289 Fixed 2.6.0
JAVA-2759 Fixed 3.8.0
CXX-1505 Fixed 3.4.0
PHPC-1105 Fixed 1.5.0
MOTOR-191 Fixed 2.0
GODRIVER-210 Done
RUST-84 Fixed 0.9.0-alpha
SWIFT-438 Done

 Description   

RFC-4013 SASLPrep is a prerequisite for implementation of SCRAM-SHA-256.



 Comments   
Comment by David Golden [ 28/Jan/18 ]

Also, note, the SHA-1 examples above are running SASLprep as SCRAM requires, but MongoDB doesn't implement that for SCRAM-SHA-1. Here's an example of MongoDB's implementation of SCRAM-SHA-1 without SASLprep:

*UPDATE* deleted until I confirm a correct conversation

Comment by David Golden [ 28/Jan/18 ]

*UPDATE* I believe these test conversations are incorrect due to a bug I found in the Perl SCRAM implementation and have deleted them.

I'll post updated values later after I finish diagnosing the problem.

Posting them in DRIVERS-439 instead of here.

Comment by A. Jesse Jiryu Davis [ 27/Jan/18 ]

Can we use SASLPrep with legacy MongoDB and SCRAM-SHA-1? DRIVERS-166 claims no, so I guess not. I'm still looking for ways to test this ASAP....

Comment by David Golden [ 20/Jan/18 ]

Already done for Perl. When I implemented Authen::Scram, I included SASLprep as a default, but with an option to turn it off (which the Perl driver currently does). All the Perl driver has to do is use the default settings when using SCRAM-SHA-256 (which is also already available in that library).

Generated at Thu Feb 08 08:21:32 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.