Skip to content

Fix handling of s2k_fo#650

Merged
MattKiazyk merged 2 commits intoXcodesOrg:mainfrom
kabiroberai:kabir/legacy-srp
Nov 5, 2024
Merged

Fix handling of s2k_fo#650
MattKiazyk merged 2 commits intoXcodesOrg:mainfrom
kabiroberai:kabir/legacy-srp

Conversation

@kabiroberai
Copy link
Contributor

Apple IDs with "old" passwords (ie those set before a certain date, the cutoff for which I'm not 100% certain) use the s2k_fo protocol rather than s2k. This legacy protocol involved an extra step in the SRP handshake, where the password was hex-encoded before performing PBKDF2 to derive the shared secret. Luckily it's pretty trivial for us to handle this and fix the erroneous "incorrect username or password" errors that it resulted in.

Closes #644 — this is in fact the root cause behind that issue.

@MattKiazyk MattKiazyk added the bugfix Fixes a bug label Nov 5, 2024
@MattKiazyk
Copy link
Contributor

Amazing!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Fixes a bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

How to Fix - invalid username password when logging in

2 participants