beaconcrypt 0.3.1__tar.gz → 0.3.2__tar.gz

{beaconcrypt-0.3.1 → beaconcrypt-0.3.2}/Cargo.lock

@@ -84,7 +84,7 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "beaconcrypt"
-version = "0.3.1"
+version = "0.3.2"
 dependencies = [
  "capnp",
  "capnpc",

{beaconcrypt-0.3.1 → beaconcrypt-0.3.2}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "beaconcrypt"
-version = "0.3.1"
+version = "0.3.2"
 edition = "2024"
 license-file = "LICENSE"
 readme = "README.md"

{beaconcrypt-0.3.1 → beaconcrypt-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: beaconcrypt
-Version: 0.3.1
+Version: 0.3.2
 Classifier: Programming Language :: Rust
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: Implementation :: PyPy

{beaconcrypt-0.3.1 → beaconcrypt-0.3.2}/README.md

@@ -57,7 +57,7 @@ The reference implementation has two profiles: `PQXDH` and `CNSA2`. Profiles are
 ## Usage
 The reference implementation is a library that can currently be used either from rust or through C FFI. The C interface is currently not tested.
 
-From rust, usage is mostly just instanciating `CryptoProvider` objects. When using the C FFI, the library creates a global `CryptoProvider` object, whose methods are wrapped by the various functions in the interface.
+From rust, usage is mostly just instanciating `CryptoProvider` objects. When using the C FFI, the library creates a global `CryptoProvider` object, whose methods are wrapped by the various functions in the interface. Look at tests for examples.
 
 # Copyright
 This work is dedicated to the public domain.

{beaconcrypt-0.3.1 → beaconcrypt-0.3.2}/src/pqxdh.rs

@@ -331,6 +331,9 @@ impl ProviderBeacon for BeaconCryptPqxdh {
 			crypto_kx::PublicKey::from_bytes(response.get_ephemeral_key().ok()?).ok()?;
 		let server_id =
 			crypto_sign::PublicKey::from_bytes(response.get_identity_key().ok()?).ok()?;
+		if server_id != self.server_id()?.clone() {
+			return None;
+		}
 		let server_kex_id = crypto_sign::ed25519_pk_to_curve25519(&server_id).ok()?;
 		let beacon_kex_id = crypto_sign::ed25519_sk_to_curve25519(self.identity_sk()).ok()?;
 		let shared_secret =
@@ -353,7 +356,6 @@ impl ProviderBeacon for BeaconCryptPqxdh {
 		let derived_secret = derive_root_key(dh1, dh2, dh3, dh4, shared_secret).ok()?;
 		self.delete_onetime_keypair();
 
-		self.add_server_pk(server_id.clone());
 		self.set_identity_kid(response.get_key_id());
 		let id = self.identity_pk().clone();
 		self.set_associated_data(build_additional_data(server_id, id));