diff --git a/Cargo.toml b/Cargo.toml index 05e9b5d..0f95b06 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "opaque-ke" -version = "0.6.0" +version = "2.0.0-pre.1" repository = "https://github.com/novifinancial/opaque-ke" keywords = ["cryptography", "crypto", "opaque", "passwords", "authentication"] description = "An implementation of the OPAQUE password-authenticated key exchange protocol" @@ -32,7 +32,7 @@ rand = "0.8" serde = { version = "1", features = ["derive"], optional = true } subtle = { version = "2.3.0", default-features = false } thiserror = "1.0.22" -zeroize = { version = "1.1.1", features = ["zeroize_derive"] } +zeroize = { version = "~1.1.1", features = ["zeroize_derive"] } [dev-dependencies] anyhow = "1.0.35" diff --git a/src/lib.rs b/src/lib.rs index 5b63e46..a797543 100644 --- a/src/lib.rs +++ b/src/lib.rs @@ -719,10 +719,11 @@ //! which is indistinguishable from the normal credential response message that the server would return for a registered client. //! The dummy message is created by passing a `None` to the password_file parameter for [ServerLogin::start]. //! -//! ## Remote private key +//! ## Remote Private Keys //! -//! Servers that want to store their private key for example in an HSM or Vault, can do this with the [`SecretKey`](keypair::SecretKey`) trait. -//! This allows [`ServerSetup`] to be constructed with an existing keypair with opaque-ke never requiring access to the bytes of the private key. +//! Servers that want to store their private key in an external location (e.g. in an HSM or vault) can do so with the +//! [`SecretKey`](keypair::SecretKey`) trait. This allows [`ServerSetup`] to be constructed using an existing keypair +//! without exposing the bytes of the private key to this library. //! ``` //! # use curve25519_dalek::ristretto::RistrettoPoint; //! # use generic_array::{GenericArray, typenum::U32}; diff --git a/src/map_to_curve.rs b/src/map_to_curve.rs index 42b8730..5ba2811 100644 --- a/src/map_to_curve.rs +++ b/src/map_to_curve.rs @@ -71,7 +71,7 @@ fn xor(x: &[u8], y: &[u8]) -> Result, InternalPakeError> { } /// Corresponds to the expand_message_xmd() function defined in -/// https://www.ietf.org/archive/id/draft-irtf-cfrg-hash-to-curve-10.txt +/// pub fn expand_message_xmd( msg: &[u8], dst: &[u8],