Struct StoredKey 

pub struct StoredKey {
    pub iterations: usize,
    pub salt: Vec<u8>,
    pub stored_key: Sha256Out,
    pub server_key: Sha256Out,
}

A stored SCRAM-SHA-256 key.

The SCRAM key format consists of several components separated by ‘$’ and ‘:’ characters:

"SCRAM-SHA-256$<iterations>:<salt>$<stored_key>:<server_key>"

Where:

• iterations: Number of PBKDF2-HMAC-SHA256 iterations used for key derivation
• salt: Base64-encoded cryptographically secure random salt used in key derivation
• stored_key: Hash of the client key, where client key is derived as SHA-256(HMAC-SHA-256(salted_password, "Client Key"))
• server_key: Server key derived as HMAC-SHA-256(salted_password, "Server Key")

The stored_key and server_key are pre-computed cryptographic values that prevent storing the raw password while maintaining secure authentication. The stored_key is a hash(hmac(P, ...)) used to verify client authentication proofs, while the server_key is a hmac(P, ...) used to generate server authentication signatures.

Fields

iterations: usize

salt: Vec<u8>

stored_key: Sha256Out

server_key: Sha256Out

Implementations

impl StoredKey

pub fn generate(password: &[u8], salt: &[u8], iterations: usize) -> Self

Generate a stored key compatible with PostgreSQL’s encoding.

Trait Implementations

impl Clone for StoredKey

fn clone(&self) -> StoredKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StoredKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for StoredKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for StoredKey

type Err = SCRAMError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl PartialEq for StoredKey

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl ServerEnvironment for StoredKey

fn get_password_parameters(&self, username: &str) -> (Cow<'static, [u8]>, usize)

fn generate_nonce(&self) -> String

fn get_stored_key(&self, username: &str) -> (Sha256Out, Sha256Out)

impl Eq for StoredKey