daxpedda and Kevin Lewi
e491c1b533
P256 implementation ( #213 )
...
* Initial P256 implementation
* Add P256 VOPRF test vectors
* Fix implementation
* Forgot `Cargo.toml` and CI
* Fix MSRV
* Fix MSRV tests
* Remove accidental leftovers
* Document constants
* Use included constant time checks
* Add P-256 VOPRF test vector checks
* Remove unnecessary bound on `CipherSuite::Group`
* P-256 improvement and fixes
* Add OPAQUE test vectors for P-256
* Remove fixed key size for 3DH
* Hide P-256 test vectors behind feature flag
* Split `Group` into modules
* Fix `hash_to_scalar`
* Point to source
* Move constants to `once_cell`
Co-authored-by: Kevin Lewi <[email protected]
2021-07-30 16:02:02 -07:00
daxpedda
3d01a605df
Move PrivateKey from CipherSuite to ServerSetup
2021-07-23 15:23:10 -07:00
daxpedda
d61e2d0b5c
Introduce PrivateKey associated type to CipherSuite
2021-07-23 15:23:10 -07:00
Kevin Lewi
f0c13945d1
Adding client enumeration mitigations ( #153 )
2021-06-21 01:29:39 -07:00
Kevin Lewi
e694a88ef9
Exporting rand ( #137 )
2021-02-11 18:10:48 -08:00
Kevin Lewi
be6d042d80
Restricting ciphersuite group to match hash output ( #125 )
2021-01-28 14:31:20 -08:00
Kevin Lewi
6dc1c8b212
Turning KeyPair into a struct ( #119 )
2021-01-25 13:20:36 -08:00
François Garillot
40ea015d6d
Remove the last superfluous constant
...
This required purgin the usage of the low-level Key access, but now we
should be able to replace the Key type piecemeal.
2020-09-22 08:50:39 -04:00
François Garillot
786bc51fdd
Normalize generic parameters for LoginSecondMessage
...
(aka use the CipherSuite just like the others)
Repair the generics in KE trait: it makes sense that generate_ke[1-3] should operate on the same key representation.
2020-09-19 19:16:36 -04:00
Kevin Lewi
c2edb2d95e
Adding a hash type to CipherSuite ( #24 )
2020-07-27 15:25:04 -07:00
Kevin Lewi
f8285c60ba
Introducing a trait for key exchange ( #20 )
2020-07-13 15:23:29 -07:00
François Garillot
69449cca3e
Activate #![deny(missing_docs)], #![deny(unsafe_code)]
2020-07-06 15:40:35 -04:00
François Garillot and KevinLewi
9d40aa7659
As a way to roll back the genericity, implement an extension trait of group for password-to-curve hashing,
...
This supersedes #18 .
Co-authored-by: KevinLewi <[email protected]
2020-07-03 21:05:18 -04:00
François Garillot
41cd80ccb5
Make oprf::generate_oprf1 generic in the Digest, as long as it matches the hash-to-curve intake of the group
...
We used to have three problems:
- overuse of the <Sha256 as Digest>::OutputSize, which is just, well, U32. Sometimes used as a parameter (as in generate_oprf1), sometimes as a constant (as in generate_oprf3).
- the `hash_to_curve` operation for `RistrettoPoint` which requires 64 bits of input entropy, is fed 64 bits of which the last 32 are zero,
- the `hash_to_curve` operation for `Curve25519Point` which requires 32 bits of input entropy, is fed 64 bits of which the last 32 are discarded,
This corrects all three and uses U32 where the size of the digest is not meant to be a constraint.
Addresses #15 partially.
2020-07-03 18:28:34 -04:00
Kevin Lewi
6d02c72aae
Updating to draft-krawczyk-cfrg-opaque-06, reworking envelope construction and removing AEAD ( #14 )
...
Updating to draft-krawczyk-cfrg-opaque-06, reworking envelope construction and removing AEAD
2020-07-02 12:24:53 -07:00
Kevin Lewi
2cf6808665
Adding documentation to each component of CipherSuite
2020-06-15 16:40:46 -07:00
Kevin Lewi
0cf13c2266
Adding CipherSuite trait to handle bundling of underlying crypto primitives
2020-06-14 23:25:31 -07:00
Kevin Lewi
f030fca1cb
index on bundle_api: 57e152b Adding password hashing functionality
2020-06-14 06:10:26 -07:00
