masking

Documentation

Overview

Package masking provides the credential masking mechanism.

Index

• func Mask(conf *internal.Configuration, ...) (nonce, maskedResponse []byte)
• func Unmask(conf *internal.Configuration, randomizedPwd, nonce, maskedResponse []byte) (serverPublicKey *group.Element, serverPublicKeyBytes []byte, ...)
• type Keys

Functions

func Mask

func Mask(
	conf *internal.Configuration,
	nonceIn, maskingKey, serverPublicKey, envelope []byte,
) (nonce, maskedResponse []byte)

TODO: maskingNonce, maskedResponse := masking.Mask(s.conf, maskingNonce, record.MaskingKey, serverPublicKey, record.Envelope) Mask encrypts the serverPublicKey and the envelope under nonceIn and the maskingKey.

func Unmask

func Unmask(
	conf *internal.Configuration,
	randomizedPwd, nonce, maskedResponse []byte,
) (serverPublicKey *group.Element, serverPublicKeyBytes []byte, envelope *keyrecovery.Envelope, err error)

Unmask decrypts the maskedResponse and returns the server's public key and the client key on success. This function assumes that maskedResponse has been checked to be of length pointLength + envelope size.

Types

type Keys

type Keys struct {
	ClientSecretKey                  *group.Scalar
	ClientPublicKey, ServerPublicKey *group.Element
	ExportKey, ServerPublicKeyBytes  []byte
}

Keys contains all the output keys from the masking mechanism.