Struct ScramCredentials 

pub struct ScramCredentials {
    pub salt: Vec<u8>,
    pub iteration_count: u32,
    pub stored_key: Vec<u8>,
    pub server_key: Vec<u8>,
}

SCRAM-SHA-256 credential bundle as defined by RFC 5802.

These values are derived from a user’s password via PBKDF2-SHA-256 and stored so that the server never needs to see the raw password for SCRAM authentication.

Derivation (per RFC 5802 §3):

SaltedPassword = PBKDF2-SHA-256(password, salt, i)
ClientKey      = HMAC-SHA-256(SaltedPassword, "Client Key")
StoredKey      = SHA-256(ClientKey)        // stored here
ServerKey      = HMAC-SHA-256(SaltedPassword, "Server Key")  // stored here

Fields

salt: Vec<u8>

Random salt bytes used in the PBKDF2 derivation.

iteration_count: u32

Number of PBKDF2 iterations (≥ 4096 recommended by RFC 7677).

stored_key: Vec<u8>

SHA-256(ClientKey) — used to verify the client proof without storing the key.

server_key: Vec<u8>

HMAC-SHA-256(SaltedPassword, "Server Key") — used to produce the server signature.

Trait Implementations

impl Clone for ScramCredentials

fn clone(&self) -> ScramCredentials

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScramCredentials

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ScramCredentials

fn eq(&self, other: &ScramCredentials) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ScramCredentials

impl StructuralPartialEq for ScramCredentials