Summary | SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports |
Queue | Horde Framework Packages |
Type | Enhancement |
State | New |
Priority | 3. High |
Owners | |
Requester | Neustradamus (at) hotmail (dot) com |
Created | 08/06/2023 (647 days ago) |
Due | |
Updated | 08/18/2023 (635 days ago) |
Assigned | |
Resolved | |
Milestone | |
Patch | No |
SCRAM in Horde code: https://github.com/search?q=org%3Ahorde+scram&type=code
SCRAM-SHA-1 has done by Michael M Slusarz in 2015, thanks a lot!
-
https://github.com/horde/Imap_Client/commit/10e5741039f6ef8c6b740eb6fc6a48936c6ecc09
When I look history:
https://github.com/horde/Imap_Client/commits/master/lib/Horde/Imap/Client/Auth/Scram.php
Jan Schneider: https://github.com/yunosh
Michael M Slusarz: https://github.com/slusarz
In PHP, there is a lib:
- https://github.com/pear/Auth_SASL/blob/master/Auth/SASL/SCRAM.php
Can you add the support of more?
Thanks in advance.
Regards,
Neustradamus
State ⇒ New
Priority ⇒ 3. High
Type ⇒ Enhancement
Summary ⇒ SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports
Queue ⇒ Horde Framework Packages
Milestone ⇒
Patch ⇒ No
I know that you have already done a little a long time ago but can you
add for IMAP/POP/SMTP and more, the supports of :
- SCRAM-SHA-1
- SCRAM-SHA-1-PLUS
- SCRAM-SHA-256
- SCRAM-SHA-256-PLUS
- SCRAM-SHA-512
- SCRAM-SHA-512-PLUS
- SCRAM-SHA3-512
- SCRAM-SHA3-512-PLUS
You can add too:
- SCRAM-SHA-224
- SCRAM-SHA-224-PLUS
- SCRAM-SHA-384
- SCRAM-SHA-384-PLUS
"When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant
SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256
variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802]".
SCRAM-SHA-1(-PLUS):
- https://tools.ietf.org/html/rfc5802
- https://tools.ietf.org/html/rfc6120
SCRAM-SHA-256(-PLUS):
- https://tools.ietf.org/html/rfc7677 since 2015-11-02
- https://tools.ietf.org/html/rfc8600 since 2019-06-21:
https://mailarchive.ietf.org/arch/msg/ietf-announce/suJMmeMhuAOmGn_PJYgX5Vm8lNA
SCRAM-SHA-512(-PLUS):
- https://tools.ietf.org/html/draft-melnikov-scram-sha-512
SCRAM-SHA3-512(-PLUS):
- https://tools.ietf.org/html/draft-melnikov-scram-sha3-512
-PLUS variants:
- RFC5056: On the Use of Channel Bindings to Secure Channels:
https://tools.ietf.org/html/rfc5056
- RFC5929: Channel Bindings for TLS: https://tools.ietf.org/html/rfc5929
- Channel-Binding Types:
https://www.iana.org/assignments/channel-binding-types/channel-binding-types.xhtml
- RFC9266: Channel Bindings for TLS 1.3: https://tools.ietf.org/html/rfc9266
IMAP:
- RFC9051: Internet Message Access Protocol (IMAP) - Version 4rev2:
https://tools.ietf.org/html/rfc9051
LDAP:
- RFC5803: Lightweight Directory Access Protocol (LDAP) Schema for
Storing Salted: Challenge Response Authentication Mechanism (SCRAM)
Secrets: https://tools.ietf.org/html/rfc5803
HTTP:
- RFC7804: Salted Challenge Response HTTP Authentication Mechanism:
https://tools.ietf.org/html/rfc7804
2FA:
- Extensions to Salted Challenge Response (SCRAM) for 2 factor
authentication: https://tools.ietf.org/html/draft-melnikov-scram-2fa
IANA:
- Simple Authentication and Security Layer (SASL) Mechanisms:
https://www.iana.org/assignments/sasl-mechanisms/sasl-mechanisms.xhtml
Linked to:
- https://github.com/scram-xmpp/info/issues/1
Thanks in advance