We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
If you're using my old draft you should know it has a big mistake. SPAKE2 includes the password to be secure in concurrent settings. See http://www.di.ens.fr/~mabdalla/papers/AbPo05a-letter.pdf for details.
The text was updated successfully, but these errors were encountered:
I think we're good, the password is included in the transcript (which is then hashed to compute the session key): https://github.com/warner/python-spake2/blob/master/spake2/spake2.py#L157 and https://github.com/warner/python-spake2/blob/master/spake2/spake2.py#L236 . Could you double-check and close this issue if you agree that we're implementing SPAKE2 correctly?
Sorry, something went wrong.
You are good: I was mislead by the comments.
No branches or pull requests
If you're using my old draft you should know it has a big mistake. SPAKE2 includes the password to be secure in concurrent settings. See http://www.di.ens.fr/~mabdalla/papers/AbPo05a-letter.pdf for details.
The text was updated successfully, but these errors were encountered: