6.0.0-beta6
28.03.26

[#15146] SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports
Summary SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports
Queue Horde Framework Packages
Type Enhancement
State New
Priority 3. High
Owners
Requester Neustradamus (at) hotmail (dot) com
Created 06.08.23 (965 days ago)
Due
Updated 18.08.23 (953 days ago)
Assigned
Resolved
Milestone
Patch No

History
08/18/2023 03:01:52 AM Neustradamus (at) hotmail (dot) com Comment #2 Reply to this comment
Dear @horde team,

SCRAM in Horde code: https://github.com/search?q=org%3Ahorde+scram&type=code

SCRAM-SHA-1 has done by Michael M Slusarz in 2015, thanks a lot!

https://github.com/horde/Imap_Client/commit/10e5741039f6ef8c6b740eb6fc6a48936c6ecc09

When I look history: 
https://github.com/horde/Imap_Client/commits/master/lib/Horde/Imap/Client/Auth/Scram.php

Jan Schneider: https://github.com/yunosh
Michael M Slusarz: https://github.com/slusarz

In PHP, there is a lib:
- https://github.com/pear/Auth_SASL/blob/master/Auth/SASL/SCRAM.php

Can you add the support of more?

Thanks in advance.

Regards,

Neustradamus
08/06/2023 03:09:01 AM Neustradamus (at) hotmail (dot) com Comment #1
State ⇒ New
Priority ⇒ 3. High
Type ⇒ Enhancement
Summary ⇒ SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports
Queue ⇒ Horde Framework Packages
Milestone ⇒
Patch ⇒ No
Reply to this comment
Dear Horde team,

I know that you have already done a little a long time ago but can you 
add for IMAP/POP/SMTP and more, the supports of :
- SCRAM-SHA-1
- SCRAM-SHA-1-PLUS
- SCRAM-SHA-256
- SCRAM-SHA-256-PLUS
- SCRAM-SHA-512
- SCRAM-SHA-512-PLUS
- SCRAM-SHA3-512
- SCRAM-SHA3-512-PLUS

You can add too:
- SCRAM-SHA-224
- SCRAM-SHA-224-PLUS
- SCRAM-SHA-384
- SCRAM-SHA-384-PLUS

"When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant 
SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256 
variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802]".

SCRAM-SHA-1(-PLUS):
- https://tools.ietf.org/html/rfc5802
- https://tools.ietf.org/html/rfc6120

SCRAM-SHA-256(-PLUS):
- https://tools.ietf.org/html/rfc7677 since 2015-11-02
- https://tools.ietf.org/html/rfc8600 since 2019-06-21: 
https://mailarchive.ietf.org/arch/msg/ietf-announce/suJMmeMhuAOmGn_PJYgX5Vm8lNA

SCRAM-SHA-512(-PLUS):
- https://tools.ietf.org/html/draft-melnikov-scram-sha-512

SCRAM-SHA3-512(-PLUS):
- https://tools.ietf.org/html/draft-melnikov-scram-sha3-512

-PLUS variants:
- RFC5056: On the Use of Channel Bindings to Secure Channels: 
https://tools.ietf.org/html/rfc5056
- RFC5929: Channel Bindings for TLS: https://tools.ietf.org/html/rfc5929
- Channel-Binding Types: 
https://www.iana.org/assignments/channel-binding-types/channel-binding-types.xhtml
- RFC9266: Channel Bindings for TLS 1.3: https://tools.ietf.org/html/rfc9266

IMAP:
- RFC9051: Internet Message Access Protocol (IMAP) - Version 4rev2: 
https://tools.ietf.org/html/rfc9051

LDAP:
- RFC5803: Lightweight Directory Access Protocol (LDAP) Schema for 
Storing Salted: Challenge Response Authentication Mechanism (SCRAM) 
Secrets: https://tools.ietf.org/html/rfc5803

HTTP:
- RFC7804: Salted Challenge Response HTTP Authentication Mechanism: 
https://tools.ietf.org/html/rfc7804

2FA:
- Extensions to Salted Challenge Response (SCRAM) for 2 factor 
authentication: https://tools.ietf.org/html/draft-melnikov-scram-2fa

IANA:
- Simple Authentication and Security Layer (SASL) Mechanisms: 
https://www.iana.org/assignments/sasl-mechanisms/sasl-mechanisms.xhtml

Linked to:
- https://github.com/scram-xmpp/info/issues/1

Thanks in advance

Saved Queries