opaque

opaque copied to clipboard

libsodium 0.7.9+ makes this library unstable

3

## Observed error When using libsodium 0.7.9 or 0.7.10, the client-side Authentication fails [at this line](https://github.com/nthparty/opaque/blob/main/lib/opaque.js#L76) with this message: ``` client_authenticated_2 false user_id ``` Curiously, this error only occurs about...

tvquizphd

Replace the current key exchange with EC-HMQV

1

The [paper](https://eprint.iacr.org/2018/163.pdf#page=47) only specifies that the key exchange has to happen inside a prime order (elliptic curve) group, but with the way they define it, I'm not sure this is...

wyatt-howe

Split the client and server implementation into separate exports

1

My client-side code shouldn't need the server-side validation logic in it. It should be possible to say: ```js import { clientRegister, clientAuthenticate } from "@nthparty/opaque"; // ES6 / TypeScript //...

stevendesu

Make sign up protocol completely oblivious as per [https://eprint.iacr.org/2018/163.pdf](https://eprint.iacr.org/2018/163.pdf#page=47) (p. 47)

wyatt-howe