opaque

package module

Go to main page

Versions in this module

v0

v0.10.0

Mar 17, 2023

Changes in this version

+ var ErrNoServerKeyMaterial = errors.New("key material not set: call SetKeyMaterial() to set values")

type Server

+ func (s *Server) SetKeyMaterial(serverIdentity, serverSecretKey, serverPublicKey, oprfSeed []byte) error

v0.9.1

Feb 12, 2023

Changes in this version

+ type ClientLoginFinishOptions struct

+ ClientIdentity []byte

+ ServerIdentity []byte

+ type ClientLoginInitOptions struct

+ Blind *group.Scalar

+ EphemeralSecretKey *group.Scalar

+ Nonce []byte

+ NonceLength uint

+ type ClientRegistrationFinalizeOptions struct

+ ClientIdentity []byte

+ EnvelopeNonce []byte

+ ServerIdentity []byte

+ type ClientRegistrationInitOptions struct

+ OPRFBlind *group.Scalar

type Group

+ func (g Group) Group() group.Group

+ func (g Group) OPRF() oprf.Identifier

+ type ServerLoginInitOptions struct

+ EphemeralSecretKey *group.Scalar

+ Nonce []byte

+ NonceLength uint

v0.9.0

Jul 15, 2022

Changes in this version

type Group

+ func (g Group) Available() bool

v0.8.2

Apr 5, 2022

Changes in this version

type Configuration

+ func (c *Configuration) Deserializer() (*Deserializer, error)

+ func (c *Configuration) GetFakeRecord(credentialIdentifier []byte) (*ClientRecord, error)

v0.8.1

Mar 28, 2022

Changes in this version

+ func RandomBytes(length int) []byte

type Client

+ Deserialize *Deserializer

+ func (c *Client) GetConf() *internal.Configuration

type Configuration

+ func (c *Configuration) GenerateOPRFSeed() []byte

+ func (c *Configuration) KeyGen() (secretKey, publicKey []byte)

+ type Deserializer struct

+ func (s *Deserializer) DecodeAkePrivateKey(encoded []byte) (*group.Scalar, error)

+ func (s *Deserializer) DecodeAkePublicKey(encoded []byte) (*group.Point, error)

+ func (s *Deserializer) KE1(ke1 []byte) (*message.KE1, error)

+ func (s *Deserializer) KE2(ke2 []byte) (*message.KE2, error)

+ func (s *Deserializer) KE3(ke3 []byte) (*message.KE3, error)

+ func (s *Deserializer) RegistrationRecord(record []byte) (*message.RegistrationRecord, error)

+ func (s *Deserializer) RegistrationRequest(registrationRequest []byte) (*message.RegistrationRequest, error)

+ func (s *Deserializer) RegistrationResponse(registrationResponse []byte) (*message.RegistrationResponse, error)

type Server

+ Deserialize *Deserializer

+ func (s *Server) GetConf() *internal.Configuration

v0.8.0

Mar 21, 2022

Changes in this version

+ var ErrIdentityPKS = errors.New("invalid server public key: pks is identity point")

+ var ErrInvalidEnvelopeLength = errors.New("record has invalid envelope length")

+ var ErrInvalidOPRFSeedLength = errors.New("input OPRF seed length is invalid (must be of hash output length)")

+ var ErrInvalidPksLength = errors.New("input server public key's length is invalid")

+ var ErrInvalidServerSecretKey = errors.New("invalid server secret key")

+ var ErrZeroSKS = errors.New("server private key is zero")

type Client

+ OPRF *oprf.Client

+ func (c *Client) LoginFinish(idc, ids []byte, ke2 *message.KE2) (ke3 *message.KE3, exportKey []byte, err error)

+ func (c *Client) LoginInit(password []byte) *message.KE1

+ func (c *Client) RegistrationFinalizeWithNonce(resp *message.RegistrationResponse, idc, ids, envelopeNonce []byte) (upload *message.RegistrationRecord, exportKey []byte)

type Configuration

+ KSF ksf.Identifier

type Server

+ func (s *Server) LoginFinish(ke3 *message.KE3) error

+ func (s *Server) LoginInit(ke1 *message.KE1, ...) (*message.KE2, error)

v0.6.0

Aug 17, 2021

Changes in this version

+ const P256Sha256

+ const P384Sha512

+ const P521Sha512

+ const RistrettoSha512

+ var ErrAkeInvalidClientMac = errors.New("failed to authenticate client: invalid client mac")

+ var ErrInvalidState = errors.New("invalid state length")

+ func GetFakeEnvelope(c *Configuration) []byte

+ type Client struct

+ Ake *ake.Client

+ Core *envelope.Core

+ Ke1 *message.KE1

+ func NewClient(p *Configuration) *Client

+ func (c *Client) DeserializeKE1(ke1 []byte) (*message.KE1, error)

+ func (c *Client) DeserializeKE2(ke2 []byte) (*message.KE2, error)

+ func (c *Client) DeserializeKE3(ke3 []byte) (*message.KE3, error)

+ func (c *Client) Finish(idc, ids []byte, ke2 *message.KE2) (ke3 *message.KE3, exportKey []byte, err error)

+ func (c *Client) Init(password []byte) *message.KE1

+ func (c *Client) KeyGen() (secretKey, publicKey []byte)

+ func (c *Client) RegistrationFinalize(clientSecretKey []byte, creds *Credentials, resp *message.RegistrationResponse) (upload *message.RegistrationRecord, exportKey []byte, err error)

+ func (c *Client) RegistrationInit(password []byte) *message.RegistrationRequest

+ func (c *Client) SessionKey() []byte

+ type ClientRecord struct

+ ClientIdentity []byte

+ CredentialIdentifier []byte

+ TestMaskNonce []byte

+ type Configuration struct

+ AKE Group

+ Context []byte

+ Hash crypto.Hash

+ KDF crypto.Hash

+ MAC crypto.Hash

+ MHF mhf.Identifier

+ Mode Mode

+ OPRF Group

+ func DefaultConfiguration() *Configuration

+ func DeserializeConfiguration(encoded []byte) (*Configuration, error)

+ func (c *Configuration) Client() *Client

+ func (c *Configuration) Serialize() []byte

+ func (c *Configuration) Server() *Server

+ type Credentials struct

+ Client []byte

+ Server []byte

+ TestEnvNonce []byte

+ TestMaskNonce []byte

+ type Group byte

+ type Mode byte

+ const External

+ const Internal

+ type Server struct

+ Ake *ake.Server

+ func NewServer(p *Configuration) *Server

+ func (s *Server) DeserializeKE1(ke1 []byte) (*message.KE1, error)

+ func (s *Server) DeserializeKE2(ke2 []byte) (*message.KE2, error)

+ func (s *Server) DeserializeKE3(ke3 []byte) (*message.KE3, error)

+ func (s *Server) DeserializeRegistrationRecord(registrationUpload []byte) (*message.RegistrationRecord, error)

+ func (s *Server) DeserializeRegistrationRequest(registrationRequest []byte) (*message.RegistrationRequest, error)

+ func (s *Server) DeserializeRegistrationResponse(registrationResponse []byte) (*message.RegistrationResponse, error)

+ func (s *Server) ExpectedMAC() []byte

+ func (s *Server) Finish(ke3 *message.KE3) error

+ func (s *Server) Init(ke1 *message.KE1, ...) (*message.KE2, error)

+ func (s *Server) KeyGen() (secretKey, publicKey []byte)

+ func (s *Server) RegistrationResponse(req *message.RegistrationRequest, ...) (*message.RegistrationResponse, error)

+ func (s *Server) SerializeState() []byte

+ func (s *Server) SessionKey() []byte

+ func (s *Server) SetAKEState(state []byte) error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL