vexahub/opaque-vx
4
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Releases 3 Activity

update docs: clarify export_key and session_key length (#338)

Browse Source
This commit is contained in:
Nik Graf
2023-08-14 17:37:56 -04:00
committed by GitHub
parent d13d261cf1
commit 07c3f74582
1 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/lib.rs
+9 -7
View File
@@ -523,8 +523,9 @@
//! //!
//! Upon a successful completion of the OPAQUE protocol (the client runs login //! Upon a successful completion of the OPAQUE protocol (the client runs login
//! with the same password used during registration), the client and server have //! with the same password used during registration), the client and server have
//! access to a session key, which is a pseudorandomly distributed 32-byte //! access to a session key, which is a pseudorandomly distributed byte
//! string which only the client and server know. Multiple login runs using the //! string (of length equal to the output size of [voprf::CipherSuite::Hash])
//! which only the client and server know. Multiple login runs using the
//! same password for the same client will produce different session keys, //! same password for the same client will produce different session keys,
//! distributed as uniformly random strings. Thus, the session key can be used //! distributed as uniformly random strings. Thus, the session key can be used
//! to establish a secure channel between the client and server. //! to establish a secure channel between the client and server.
@@ -620,11 +621,12 @@
//! //!
//! ## Export Key //! ## Export Key
//! //!
//! The export key is a pseudorandomly distributed 32-byte string output by both //! The export key is a pseudorandomly distributed byte string
//! the [Client Registration Finish](#client-registration-finish) and [Client //! (of length equal to the output size of [voprf::CipherSuite::Hash]) output by
//! Login Finish](#client-login-finish) steps. The same export key string will //! both the [Client Registration Finish](#client-registration-finish) and
//! be output by both functions only if the exact same password is passed to //! [Client Login Finish](#client-login-finish) steps. The same export key
//! [ClientRegistration::start] and [ClientLogin::start]. //! string will be output by both functions only if the exact same password is
//! passed to [ClientRegistration::start] and [ClientLogin::start].
//! //!
//! The export key retains as much secrecy as the password itself, and is //! The export key retains as much secrecy as the password itself, and is
//! similarly derived through an evaluation of the key stretching function. //! similarly derived through an evaluation of the key stretching function.