srp

Documentation

Overview

Package srp contains implementation of Secure Remote Password protocol.

Index

• type Answer
• type Input
• type SRP
  • func NewSRP(random io.Reader) SRP
  • func (s SRP) Hash(password, srpB, random []byte, i Input) (Answer, error)
  • func (s SRP) NewHash(password []byte, i Input) (hash, newSalt []byte, _ error)

Types

type Answer

type Answer struct {
	// A parameter (see SRP)
	A []byte
	// M1 parameter (see SRP)
	M1 []byte
}

Answer is result of SRP algorithm.

type Input

type Input struct {
	// One of two salts used by the derivation function (see SRP 2FA login)
	Salt1 []byte
	// One of two salts used by the derivation function (see SRP 2FA login)
	Salt2 []byte
	// Base (see SRP 2FA login)
	G int
	// 2048-bit modulus (see SRP 2FA login)
	P []byte
}

Input is hashing algorithm parameters from server.

Copy of tg.PasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow

type SRP

type SRP struct {
	// contains filtered or unexported fields
}

SRP is client implementation of Secure Remote Password protocol.

See https://core.telegram.org/api/srp.

func NewSRP

func NewSRP(random io.Reader) SRP

NewSRP creates new SRP instance.

func (SRP) Hash

func (s SRP) Hash(password, srpB, random []byte, i Input) (Answer, error)

Hash computes user password hash using parameters from server.

See https://core.telegram.org/api/srp#checking-the-password-with-srp.

func (SRP) NewHash

func (s SRP) NewHash(password []byte, i Input) (hash, newSalt []byte, _ error)

NewHash computes new user password hash using parameters from server.

See https://core.telegram.org/api/srp#setting-a-new-2fa-password.

TDLib implementation: See https://github.com/tdlib/td/blob/fa8feefed70d64271945e9d5fd010b957d93c8cd/td/telegram/PasswordManager.cpp#L57.

TDesktop implementation: See https://github.com/telegramdesktop/tdesktop/blob/v3.4.8/Telegram/SourceFiles/core/core_cloud_password.cpp#L68.