Split the Credential

Password Part

The text after the colon is the password display.

highlighted = computed this step

The text after the colon is the password display

The password display row comes from the decoded credential after the colon.

after colon=seven\text{after colon}=\text{seven}
Password partThe decoded credential split and empty response body are recomputed from pinned bytes.Password part - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty

The display is readable text

This is the point of the lesson: base-sixty-four is not encryption.

not encryption\text{not encryption}
Password partThe decoded credential split and empty response body are recomputed from pinned bytes.Password part - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty

The split check passes

The check row says the colon split produced the pinned username and password display.

split=yes\text{split}=\text{yes}
Password partThe decoded credential split and empty response body are recomputed from pinned bytes.Password part - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty

Summary

The Basic credential contains readable username and password text after decoding.

password display checked\text{password display checked}
Password partThe decoded credential split and empty response body are recomputed from pinned bytes.Password part - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty