opaquebind
| Crates.io | opaquebind |
| lib.rs | opaquebind |
| version | 0.3.6 |
| source | src |
| created_at | 2022-01-13 16:21:13.73223 |
| updated_at | 2024-06-13 14:54:34.955234 |
| description | Simple configuration of OPAQUE, a passowrd-authenticated key exchange protocol. |
| homepage | |
| repository | https://github.com/tiptenbrink/opaque-borink/tree/v0.3.6/opaquebind |
| max_upload_size | |
| id | 513391 |
| size | 21,036 |
Tip ten Brink (tiptenbrink)
documentation
README
This crate was originally named opaquebind, but has been renamed to opaque-borink. The last version named opaquebind can be found found here.
A simple configuration of the opaque-ke OPAQUE implementation, using a base64url-encoded format to serialize and deserialize the Rust structs.
OPAQUE (see the Internet-Draft) is an upcoming standard for password authentication. It is more secure than a traditional simple salt and password hash scheme.
It uses a basic CipherSuite configured as follows:
- curve25519_dalek Ristretto group as Group
- opaque-ke's own TripleDH as KeyExchange
- sha2 Sha512 as Hash
- argon2 default Argon2 as SlowHash
It exposes four functions on both the server and client: login finish/start and register finish/start; as well as a key generation function.
opaquebind serves as the core library for opaquepy and @tiptenbrink/opaquewasm, bindings for Python and WebAssembly, respectively.