@tikoci/centrs 0.1.9-next.22 → 0.1.9-next.23

package/src/protocols/btest-session.ts

@@ -72,6 +72,7 @@ import {
 } from "./btest.ts";
 import {
 	bytesToBigIntBE,
+	type EcSrp5Shared,
 	ecSrp5ClientConfirm,
 	ecSrp5ClientShared,
 	ecSrp5Id,
@@ -676,11 +677,13 @@ async function runClientEcSrp5(
 
 	const challenge = parseServerChallenge(await readAuthFrame(channel));
 	const validator = ecSrp5Id(username, password, challenge.salt);
-	const shared = ecSrp5ClientShared(
-		keypair.privateKey,
-		challenge.serverPublicKey,
-		keypair.publicKey,
-		validator,
+	const shared = btestShared(
+		ecSrp5ClientShared(
+			keypair.privateKey,
+			challenge.serverPublicKey,
+			keypair.publicKey,
+			validator,
+		),
 	);
 	const clientCc = ecSrp5ClientConfirm(shared);
 	await channel.write(encodeConfirmation(clientCc));
@@ -782,11 +785,13 @@ async function runServerEcSrp5(
 	);
 	await channel.write(encodeServerChallenge(serverPublicKey, salt));
 
-	const shared = ecSrp5ServerShared(
-		keypair.privateKey,
-		validatorScalar,
-		hello.publicKey,
-		serverPublicKey,
+	const shared = btestShared(
+		ecSrp5ServerShared(
+			keypair.privateKey,
+			validatorScalar,
+			hello.publicKey,
+			serverPublicKey,
+		),
 	);
 	const clientCc = await readAuthFrame(channel);
 	const expectedCc = ecSrp5ClientConfirm(shared);
@@ -799,6 +804,21 @@ async function runServerEcSrp5(
 	return hello.username;
 }
 
+/**
+ * The shared secret as btest hashes it: `z` without its leading zero bytes
+ * (OpenSSL `BN_bn2bin`), where MAC-Telnet's `mtwei.c` pads it to 32
+ * (`BN_bn2binpad`), so the shared math in `ec-srp5.ts` keeps 32 bytes.
+ *
+ * Grounded on CHR 7.24.5 `/tool/bandwidth-server`: over 800 client handshakes,
+ * every one whose `z` began with 0x00 (9) failed with the padded form and no
+ * other did. Stripped, 600 of 600 verified, 4 of them with a leading zero.
+ */
+export function btestShared(shared: EcSrp5Shared): EcSrp5Shared {
+	let start = 0;
+	while (start < shared.z.length - 1 && shared.z[start] === 0) start++;
+	return start === 0 ? shared : { j: shared.j, z: shared.z.subarray(start) };
+}
+
 function ecSrp5RandomSalt(): Uint8Array {
 	return crypto.getRandomValues(new Uint8Array(16));
 }

package/src/protocols/mac-telnet-console.ts

@@ -639,6 +639,22 @@ const BARE_BAD_PARAMETER =
 const BARE_SYNTAX =
 	/^[ \t]*(?:syntax error|bad command name|(?:expected|missing) [a-z]+(?: [a-z]+)*)[^\n]*\(line \d+ column \d+\)/im;
 
+/**
+ * Whether the printed value of `:parse` carries a rejection, by the same
+ * position-anchored grammar {@link classifyParseResult} throws on. For probes
+ * and censuses that need the verdict as a boolean. On the schema-5 corpus it
+ * agrees with the upstream `response_class` on every one of 5,640 channel and
+ * legacy observations (#498).
+ */
+export function isParseRejection(output: string): boolean {
+	return (
+		WRAPPED_BAD_PARAMETER.test(output) ||
+		BARE_BAD_PARAMETER.test(output) ||
+		WRAPPED_BAD_COMMAND.test(output) ||
+		BARE_SYNTAX.test(output)
+	);
+}
+
 /**
  * Classify the printed value of `:put [:parse "<cli>"]`. Grounded on CHR 7.23.3
  * (see GH#230): `:parse` *never* throws — it returns a value whose text carries