FlexHub Forum

Protocol talk => NMDC Protocol => NMDC Extensions => Topic started by: FlipFlop™ on September 21, 2011, 13:08:35

Title: $Supports SaltPass
Post by: FlipFlop™ on September 21, 2011, 13:08:35
Providing hashed and salted passwords for NMDC, no more sending of plaintext passwords.

Technique for salting and hashing is identical to ADC. The hub provides the salt with $GetPass, the client adds the salt to the pass and hashes it, converts it to base32 and sends it with $MyPass.

Example:
C: $Supports SaltPass
H: $Supports SaltPass
C: $ValidateNick <nick>
H: $GetPass <salt>
C: $MyPass <salted pass>

Title: Re: $Supports SaltPass
Post by: iceman50 on September 21, 2011, 13:12:37
Added/Tested/Confirmed for the next beta of DiCe!++
Title: Re: $Supports SaltPass
Post by: Crise on September 21, 2011, 15:49:40
presumably you are speaking about either tiger hash or a TTH... which one does it use?

Though why not just port the ADC commands directly like arne did with $ADCGET back in the day?
Title: Re: $Supports SaltPass
Post by: FlipFlop™ on September 21, 2011, 16:36:08
Hashing is done with tiger hash indeed.

Will look into $ADC, looks like an interesting way to make ADC commands available to NMDC. Might be able to use $ADC instead of $Xfer to allow full compatibility with ADC.