sirp 2.0.0.pre → 2.0.0

data/examples/clients/ruby/client.rb

@@ -1,48 +0,0 @@
-#!/usr/bin/env ruby
-# encoding: utf-8
-
-require 'rubygems'
-require 'bundler/setup'
-require 'http'
-require 'json'
-require 'sirp'
-require 'logger'
-logger = Logger.new $stdout
-
-server_addr  = 'http://localhost:4567/authenticate'
-username     = 'leonardo'
-password     = 'capricciosa'
-prime_length = 4096
-
-# The salt and verifier should be stored on the server database.
-# In this example code these values are hard-coded in server.rb
-# @auth = SIRP::Verifier.new(prime_length).generate_userauth(username, password)
-# @auth is a hash containing :username, :verifier and :salt
-
-logger.info 'Start authentication'
-
-client = SIRP::Client.new(prime_length)
-A = client.start_authentication
-
-logger.info "Sending username: '#{username}' and A: '#{A}' to server"
-
-# Client => Server: username, A
-# Server => Client: salt, B
-response = HTTP.post(server_addr, form: { username: username, A: A }).parse
-logger.info "Server responded with: '#{response}'"
-
-logger.info 'Client is calculating M, from B and salt, as a response to the challenge'
-client_M = client.process_challenge(username, password, response['salt'], response['B'])
-
-# Client => Server: username, M
-# Server => Client: H(AMK)
-logger.info "Client is sending M: '#{client_M}' to server"
-response = HTTP.post(server_addr, form: { username: username, M: client_M }).parse
-logger.info "Server responded with: #{response}"
-
-if client.verify(response['H_AMK'])
-  logger.info 'Client verification of server H_AMK has succeeded! Authenticated!'
-  logger.info "Client and server have negotiated shared secret K: '#{client.K}'"
-else
-  logger.error 'Client verification of server H_AMK has failed!'
-end

data/examples/server.rb

@@ -1,88 +0,0 @@
-#!/usr/bin/env ruby
-# encoding: utf-8
-
-require 'rubygems'
-require 'bundler/setup'
-require 'sinatra'
-require 'json'
-require 'sirp'
-require 'logger'
-logger = Logger.new $stdout
-
-# Sinatra : Use Puma
-configure { set :server, :puma }
-
-# Set prime N length - client has to use the same value!
-prime_length = 4096
-
-# Simulated DB
-users = {
-  leonardo: 'capricciosa',
-  raphael: 'quattro formaggi',
-  donatello: 'margherita',
-  michelangelo: 'tropicana'
-}
-
-user_verifiers = users.map do |username, password|
-  { username => SIRP::Verifier.new(prime_length).generate_userauth(username, password) }
-end
-
-user_verifiers.each { |h| users.update h }
-
-before do
-  content_type 'application/json'
-  response['Access-Control-Allow-Origin'] = '*'
-end
-
-post '/authenticate' do
-  username = params[:username]
-  user = users[username.to_sym]
-
-  unless user
-    logger.warn "User #{username} not found"
-    halt 401
-  end
-
-  if params[:A]
-    logger.info 'P1 : Starting'
-    logger.info "P1 : Server received username '#{username}' and A"
-    logger.info "P1 : Client A : #{params[:A]}"
-    aa = params[:A]
-    v = user[:verifier]
-    salt = user[:salt]
-
-    # Server generates B, saves A and B to database
-    verifier = SIRP::Verifier.new(prime_length)
-    session = verifier.get_challenge_and_proof(username, v, salt, aa)
-
-    logger.info 'P1 : Server persisting user verifier (proof)'
-    user[:session_proof] = session[:proof]
-
-    logger.info 'P1 : Server sending salt and B'
-    logger.info "P1 : Server salt : #{session[:challenge][:salt].length} : #{session[:challenge][:salt]}"
-    logger.info "P1 : Server B : #{session[:challenge][:B].length} : #{session[:challenge][:B]}"
-    return JSON.generate(session[:challenge])
-  elsif params[:M]
-    logger.info 'P2 : Starting'
-    logger.info "P2 : Server received username '#{username}' and client M"
-    client_M = params[:M]
-    logger.info "P2 : Client M : #{client_M.length} : #{client_M}"
-
-    logger.info 'P2 : Retrieving verifier from the database'
-    proof = user[:session_proof]
-
-    logger.info 'P2 : Verifying client/server M match, generating H_AMK'
-    verifier = SIRP::Verifier.new(prime_length)
-    server_H_AMK = verifier.verify_session(proof, client_M)
-    logger.info "P2 : server M: #{verifier.M}"
-
-    if server_H_AMK
-      logger.info "P2 : #{username} Authenticated!"
-      logger.info "P2 : Client and server negotiated shared key K : #{verifier.K}"
-      logger.info "P2 : Server sending final H_AMK : #{server_H_AMK.length} : #{server_H_AMK}"
-      return JSON.generate(H_AMK: server_H_AMK)
-    end
-  end
-
-  halt 401
-end