1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
/*
* SRP-6a (RFC 5054 compatatible)
* (C) 2011 Jack Lloyd
*
* Distributed under the terms of the Botan license
*/
#ifndef BOTAN_RFC5054_SRP6_H__
#define BOTAN_RFC5054_SRP6_H__
#include <botan/bigint.h>
#include <botan/hash.h>
#include <botan/rng.h>
#include <botan/symkey.h>
#include <string>
namespace Botan {
/**
*/
class BOTAN_DLL SRP6_Client_Session
{
public:
/**
* Client side step 1
* @param username the username we are attempting login for
* @param password the password we are attempting to use
* @param group_id specifies the shared SRP group
* @param hash_id specifies a secure hash function
* @param salt is the salt value sent by the server
* @param B is the server's public value
* @param rng is a random number generator
*
* @return (A,M1) the client public key and verification values,
which are sent to the server
*/
std::pair<BigInt, BigInt> step1(const std::string& username,
const std::string& password,
const std::string& group_id,
const std::string& hash_id,
const MemoryRegion<byte>& salt,
const BigInt& B,
RandomNumberGenerator& rng);
/**
* Client side step 2
* @param M2 the server verification value
* @return shared secret key
*/
SymmetricKey step2(const BigInt& M2);
/**
* Generate a new SRP-6 verifier
* @param identifier a username or other client identifier
* @param password the secret used to authenticate user
* @param salt a randomly chosen value, at least 128 bits long
*/
static BigInt generate_verifier(const std::string& identifier,
const std::string& password,
const MemoryRegion<byte>& salt,
const std::string& group_id,
const std::string& hash_id);
private:
std::string hash_id;
BigInt A, M1, S;
size_t p_bytes;
};
class BOTAN_DLL SRP6_Server_Session
{
public:
/**
* Server side step 1
* @param v the verification value saved from client registration
*/
BigInt step1(const BigInt& v,
const std::string& group_id,
const std::string& hash_id,
RandomNumberGenerator& rng);
std::pair<SymmetricKey, BigInt> step2(const BigInt& A, const BigInt& M1);
private:
std::string hash_id;
BigInt B, b, v, S, p;
size_t p_bytes;
};
}
#endif
|
