search

tv42 / scram-password

Command-line utility for Postgres-compatible SCRAM-SHA-256 passwords
MIT License
2 stars 0 forks source link

Other SCRAM passwords #1

Closed Neustradamus closed 11 months ago

Neustradamus commented 11 months ago

Hello @tv42,

Thanks for your work on SCRAM!

Why do you not rename your repository:

And create others like:

Or have one for all?

Some people uses other hashes too.

tv42 commented 11 months ago

SCRAM-SHA-512 and SCRAM-SHA3-512 are not specified: https://www.iana.org/assignments/sasl-mechanisms/sasl-mechanisms.xhtml#scram

SCRAM-SHA-512 etc also have no reason to exist; SHA256 is plenty strong for the use, and if it isn't then you need a real passphrase storage solution, with memory-hardness etc.

Nobody should be using SHA-1 for anything new, and I haven't encountered any software that uses SCRAM-SHA-1 so I haven't programmed it.

This repository is just a little command-line wrapper over https://github.com/xdg-go/scram