srp
srp copied to clipboard
1Password
A set of Go functions for Secure Remote Password protocol implementation in 1Password Teams
👋🏽 hi team ### What This PR proposes braking changes to some of the exported functions ⚠️ Namely, `NewSRPClient()`, `NewSRPServer()`, and `KDFRFC5054()`. Concretely, it changes the signature of these methods...
According to the [SRP design specification](http://srp.stanford.edu/design.html), you reference the client should show it's proof first. However in the `ClientProof()` you check if the server is proved first? ``` if !s.isServer...
This issue corresponds to https://github.com/1Password/srp/pull/37 created by @CamiloGarciaLaRotta. I fully agree that it was a mistake to panic instead of more proper error handling. But we need to move forward...
It looks like there is finally a constant time big integer library for Go that does everything we need: https://github.com/cronokirby/saferith It still comes with warnings about being in Beta, but...