Kevin Lewi
4da6bbce0c
Fixing key sizes and removing serialization ( #144 )
2021-02-20 03:51:04 -08:00
Kevin Lewi
782eeb7090
Converting to_bytes and try_from to serialize() and deserialize() ( #138 )
2021-02-17 02:47:00 -08:00
Kevin Lewi
e694a88ef9
Exporting rand ( #137 )
2021-02-11 18:10:48 -08:00
Kevin Lewi
e35410ab95
Fixing envelope mode inconsistency and matching against latest test vectors ( #130 )
2021-02-05 13:17:02 -08:00
Kevin Lewi
099f887530
Applying envelope simplified construction and km3 mac changes ( #128 )
2021-02-04 15:57:06 -08:00
Kevin Lewi
9d3963f98e
Addressing various TODOs and minor cleanups ( #127 )
2021-02-02 12:12:20 -08:00
Kevin Lewi
6eeeb0db28
Fixing test vectors and use of SHA512 ( #120 )
2021-01-26 09:27:30 -08:00
Kevin Lewi
ba53089199
Fixing construct_aad() bug ( #112 )
2021-01-07 17:44:27 -08:00
Kevin Lewi
9f6b32a5ea
Updating envelope structure to support two fixed modes ( #108 )
...
* Moving id_u and id_s from ClientLoginStartParameters to ClientLoginFinishParameters
* Updating envelope format to support two fixed modes
2021-01-04 14:27:20 -08:00
Kevin Lewi
51b3781e5c
Updating AKE message format ( #85 )
2020-11-16 11:49:27 -08:00
Kevin Lewi
0fc3448777
Updating opaque interfaces to include ids from the internet draft ( #56 )
2020-11-02 20:15:06 -05:00
François Garillot
9c06c98ad6
Introduce enum structs to replicate TLS message format
...
This PR favors native coercions of enums to numerical types to help ser/de operations.
Small rearrangement of the serialization module.
2020-11-02 20:15:02 -05:00
François Garillot
344e8ad8d1
Updating serialization for RegisterFirstMessage ( #35 )
2020-11-02 20:14:47 -05:00
Kevin Lewi
195a698ad8
Fix omission of nonce in hmac computation for envelope ( #44 )
2020-09-01 11:23:00 -07:00
Kevin Lewi
c2edb2d95e
Adding a hash type to CipherSuite ( #24 )
2020-07-27 15:25:04 -07:00
François Garillot
7b11da3bd6
Remove 2x superfluous to_vec
2020-07-23 13:45:46 -04:00
François Garillot
41cd80ccb5
Make oprf::generate_oprf1 generic in the Digest, as long as it matches the hash-to-curve intake of the group
...
We used to have three problems:
- overuse of the <Sha256 as Digest>::OutputSize, which is just, well, U32. Sometimes used as a parameter (as in generate_oprf1), sometimes as a constant (as in generate_oprf3).
- the `hash_to_curve` operation for `RistrettoPoint` which requires 64 bits of input entropy, is fed 64 bits of which the last 32 are zero,
- the `hash_to_curve` operation for `Curve25519Point` which requires 32 bits of input entropy, is fed 64 bits of which the last 32 are discarded,
This corrects all three and uses U32 where the size of the digest is not meant to be a constraint.
Addresses #15 partially.
2020-07-03 18:28:34 -04:00
Kevin Lewi
6d02c72aae
Updating to draft-krawczyk-cfrg-opaque-06, reworking envelope construction and removing AEAD ( #14 )
...
Updating to draft-krawczyk-cfrg-opaque-06, reworking envelope construction and removing AEAD
2020-07-02 12:24:53 -07:00
Kevin Lewi