go-srp

go-srp copied to clipboard

This is my sample code for reference. ```go package main import ( _ "crypto/sha256" "encoding/base64" "fmt" "github.com/kong/go-srp" ) func main() { params := srp.GetParams(2048) salt := []byte("salty") identity := []byte("alice")...

jiatower

https://github.com/Kong/go-srp/blob/master/server.go#L55 should probably use crypto/subtle's ConstantTimeCompare. I'm guessing leaking timing is not exploitable in most contexts but you never know.

alokmenghrajani

panic: crypto: requested hash function #5 is unavailable

6

I get the following error when I create a new Client ``` panic: crypto: requested hash function #5 is unavailable goroutine 1 [running]: crypto.Hash.New(0x5, 0x0, 0x0) C:/Go/src/crypto/crypto.go:89 +0x117 github.com/getinsomnia/go-srp.getMultiplier(0xc0420464a0, 0x20)...

alwindoss

While debugging intermittent failure during SRP based login flow, we discovered that the library was not adding correct padding at certain places.

ua741