| author | Michael Krelin <hacker@klever.net> | 2014-06-30 18:29:31 (UTC) |
|---|---|---|
| committer | Michael Krelin <hacker@klever.net> | 2014-06-30 18:29:31 (UTC) |
| commit | 9d4ae3e240e8d82a5e500c1bfbf3b4e8a43c62c6 (patch) (side-by-side diff) | |
| tree | 9c8068f07b59aaedd72393090a4f68e9dfc58c3e /backend/node | |
| parent | c392fe28606eefa0c814e5c25d641f5ffe623186 (diff) | |
| download | clipperz-9d4ae3e240e8d82a5e500c1bfbf3b4e8a43c62c6.zip clipperz-9d4ae3e240e8d82a5e500c1bfbf3b4e8a43c62c6.tar.gz clipperz-9d4ae3e240e8d82a5e500c1bfbf3b4e8a43c62c6.tar.bz2 | |
adjust SRP to match clipper change
| -rw-r--r-- | backend/node/src/clipperz.js | 17 |
1 files changed, 12 insertions, 5 deletions
diff --git a/backend/node/src/clipperz.js b/backend/node/src/clipperz.js index 37b9cae..72b6c9f 100644 --- a/backend/node/src/clipperz.js +++ b/backend/node/src/clipperz.js @@ -49,2 +49,4 @@ var srp_g = BIGNUM(2); var srp_n = BIGNUM("115b8b692e0e045692cf280b436735c77a5a9e8a9e7ed56c965f87db5b2a2ece3",16); +var srp_k = BIGNUM("64398bff522814e306a97cb9bfc4364b7eed16a8c17c5208a40a2bad2933c8e",16); +var srp_hn = "597626870978286801440197562148588907434001483655788865609375806439877501869636875571920406529"; var n123 = '112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00'; @@ -177,3 +179,3 @@ var CLIPPERZ = module.exports = function(CONFIG) { req.session.b = clipperz_random(); - req.session.B = BIGNUM(req.session.v,16).add(srp_g.powm(BIGNUM(req.session.b,16),srp_n)).toString(16); + req.session.B = srp_k.mul(BIGNUM(req.session.v,16)).add(srp_g.powm(BIGNUM(req.session.b,16),srp_n)).toString(16); var rv = {s:req.session.s,B:req.session.B} @@ -184,8 +186,13 @@ var CLIPPERZ = module.exports = function(CONFIG) { case 'credentialCheck': - var u = clipperz_hash(BIGNUM(req.session.B,16).toString(10)); + var u = clipperz_hash(BIGNUM(req.session.A,16).toString(10)+BIGNUM(req.session.B,16).toString(10)); var A = BIGNUM(req.session.A,16); - var S = A.mul(BIGNUM(req.session.v,16).powm(BIGNUM(u,16),srp_n)).powm( - BIGNUM(req.session.b,16), srp_n); + var S = A.mul(BIGNUM(req.session.v,16).powm(BIGNUM(u,16),srp_n)).powm(BIGNUM(req.session.b,16),srp_n); var K = clipperz_hash(S.toString(10)); - var M1 = clipperz_hash(A.toString(10)+BIGNUM(req.session.B,16).toString(10)+K.toString(16)); + var M1 = clipperz_hash( + srp_hn + +clipperz_hash(req.session.C) + +BIGNUM(req.session.s,16).toString(10) + +A.toString(10) + +BIGNUM(req.session.B,16).toString(10) + +K ); if(M1!=ppp.M1) return res.res({error:'?'}); |