Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

opaque

package module

Go to main page

Versions in this module

v0

v0.8.0

Jan 12, 2024

v0.7.0

Jan 12, 2024

v0.6.0

Jan 12, 2024

v0.5.0

Jan 12, 2024

v0.4.0

Jan 12, 2024

Changes in this version

type Server

+ func (s *Server) TopaqueLoginInit(ke1 *message.KE1, record *ClientRecord, threshold int, ...) (*message.KE2, error)

+ func (s *Server) TopaqueRegistrationResponse(req *message.RegistrationRequest, serverPublicKey *group.Element, ...) *message.RegistrationResponse

v0.3.0

Oct 5, 2023

v0.2.0

Oct 4, 2023

v0.1.0

Oct 4, 2023

Changes in this version

+ const P256Sha256

+ const P384Sha512

+ const P521Sha512

+ const RistrettoSha512

+ var ErrAkeInvalidClientMac = errors.New("failed to authenticate client: invalid client mac")

+ var ErrInvalidEnvelopeLength = errors.New("record has invalid envelope length")

+ var ErrInvalidOPRFSeedLength = errors.New("input OPRF seed length is invalid (must be of hash output length)")

+ var ErrInvalidPksLength = errors.New("input server public key's length is invalid")

+ var ErrInvalidState = errors.New("invalid state length")

+ var ErrNoServerKeyMaterial = errors.New("key material not set: call SetKeyMaterial() to set values")

+ var ErrZeroSKS = errors.New("server private key is zero")

+ func RandomBytes(length int) []byte

+ type Client struct

+ Ake *ake.Client

+ Deserialize *Deserializer

+ OPRF *oprf.Client

+ func NewClient(c *Configuration) (*Client, error)

+ func (c *Client) GetConf() *internal.Configuration

+ func (c *Client) LoginFinish(ke2 *message.KE2, options ...ClientLoginFinishOptions) (ke3 *message.KE3, exportKey []byte, err error)

+ func (c *Client) LoginInit(password, username []byte, options ...ClientLoginInitOptions) *message.KE1

+ func (c *Client) RegistrationFinalize(resp *message.RegistrationResponse, ...) (record *message.RegistrationRecord, exportKey []byte)

+ func (c *Client) RegistrationInit(password []byte, username []byte, options ...ClientRegistrationInitOptions) *message.RegistrationRequest

+ func (c *Client) SessionKey() []byte

+ type ClientLoginFinishOptions struct

+ ClientIdentity []byte

+ ServerIdentity []byte

+ type ClientLoginInitOptions struct

+ Blind *group.Scalar

+ EphemeralSecretKey *group.Scalar

+ Nonce []byte

+ NonceLength uint

+ type ClientRecord struct

+ ClientIdentity []byte

+ CredentialIdentifier []byte

+ TestMaskNonce []byte

+ type ClientRegistrationFinalizeOptions struct

+ ClientIdentity []byte

+ EnvelopeNonce []byte

+ ServerIdentity []byte

+ type ClientRegistrationInitOptions struct

+ OPRFBlind *group.Scalar

+ type Configuration struct

+ AKE Group

+ Context []byte

+ Hash crypto.Hash

+ KDF crypto.Hash

+ KSF ksf.Identifier

+ MAC crypto.Hash

+ OPRF Group

+ func DefaultConfiguration() *Configuration

+ func DeserializeConfiguration(encoded []byte) (*Configuration, error)

+ func (c *Configuration) Client() (*Client, error)

+ func (c *Configuration) Deserializer() (*Deserializer, error)

+ func (c *Configuration) Generate() (t1, t2, gs *group.Element)

+ func (c *Configuration) GenerateOPRFSeed() []byte

+ func (c *Configuration) GetFakeRecord(credentialIdentifier []byte) (*ClientRecord, error)

+ func (c *Configuration) KeyGen() (secretKey, publicKey []byte)

+ func (c *Configuration) Serialize() []byte

+ func (c *Configuration) Server() (*Server, error)

+ type Deserializer struct

+ func (d *Deserializer) DecodeAkePrivateKey(encoded []byte) (*group.Scalar, error)

+ func (d *Deserializer) DecodeAkePublicKey(encoded []byte) (*group.Element, error)

+ func (d *Deserializer) KE1(ke1 []byte) (*message.KE1, error)

+ func (d *Deserializer) KE2(ke2 []byte) (*message.KE2, error)

+ func (d *Deserializer) KE3(ke3 []byte) (*message.KE3, error)

+ func (d *Deserializer) RegistrationRecord(record []byte) (*message.RegistrationRecord, error)

+ func (d *Deserializer) RegistrationRequest(registrationRequest []byte) (*message.RegistrationRequest, error)

+ func (d *Deserializer) RegistrationResponse(registrationResponse []byte) (*message.RegistrationResponse, error)

+ type Group byte

+ func (g Group) Available() bool

+ func (g Group) Group() group.Group

+ func (g Group) OPRF() oprf.Identifier

+ type Server struct

+ Ake *ake.Server

+ Deserialize *Deserializer

+ OPRF *oprf.Server

+ func NewServer(c *Configuration) (*Server, error)

+ func (s *Server) ExpectedMAC() []byte

+ func (s *Server) GetConf() *internal.Configuration

+ func (s *Server) HpakeLoginInit(ke1 *message.KE1, record *ClientRecord, options ...ServerLoginInitOptions) (*message.KE2, error)

+ func (s *Server) HpakeRegistrationResponse(req *message.RegistrationRequest, serverPublicKey *group.Element, ...) *message.RegistrationResponse

+ func (s *Server) HpakeSetKeyMaterial(serverIdentity, serverSecretKey, serverPublicKey, oprfSeed []byte, ...) error

+ func (s *Server) LoginFinish(ke3 *message.KE3) error

+ func (s *Server) LoginInit(ke1 *message.KE1, record *ClientRecord, options ...ServerLoginInitOptions) (*message.KE2, error)

+ func (s *Server) RegistrationResponse(req *message.RegistrationRequest, serverPublicKey *group.Element, ...) *message.RegistrationResponse

+ func (s *Server) SerializeState() []byte

+ func (s *Server) SessionKey() []byte

+ func (s *Server) SetAKEState(state []byte) error

+ func (s *Server) SetKeyMaterial(serverIdentity, serverSecretKey, serverPublicKey, oprfSeed []byte) error

+ type ServerLoginInitOptions struct

+ EphemeralSecretKey *group.Scalar

+ Nonce []byte

+ NonceLength uint