public static void Test()
{
SecureRemotePassword.SRPParameters srpParameters = new SecureRemotePassword.SRPParameters();
BigInteger bigInteger = HashUtilities.HashToBigInteger(SecureRemotePassword.SRPParameters.Hash,
(HashUtilities.HashDataBroker) "USER:PASSWORD");
SecureRemotePassword secureRemotePassword1 =
new SecureRemotePassword("USER", bigInteger, true, SecureRemotePassword.SRPParameters.Defaults);
SecureRemotePassword secureRemotePassword2 = new SecureRemotePassword("USER", bigInteger, false,
SecureRemotePassword.SRPParameters.Defaults);
Console.WriteLine("Client sending A = {0}",
(object)secureRemotePassword2.PublicEphemeralValueA.ToHexString());
secureRemotePassword1.PublicEphemeralValueA = secureRemotePassword2.PublicEphemeralValueA;
Console.WriteLine("Server sending salt = {0}", (object)secureRemotePassword1.Salt.ToHexString());
Console.WriteLine("Server sending B = {0}",
(object)secureRemotePassword1.PublicEphemeralValueB.ToHexString());
secureRemotePassword2.Salt = secureRemotePassword1.Salt;
secureRemotePassword2.PublicEphemeralValueB = secureRemotePassword1.PublicEphemeralValueB;
Console.WriteLine("Server's session key = {0}", (object)secureRemotePassword1.SessionKey.ToHexString());
Console.WriteLine("Client's session key = {0}", (object)secureRemotePassword2.SessionKey.ToHexString());
Console.WriteLine("\nServer key == client key {0}",
(object)(secureRemotePassword1.SessionKey == secureRemotePassword2.SessionKey));
Console.WriteLine("Client proof valid: {0}",
(object)secureRemotePassword1.IsClientProofValid(secureRemotePassword2.ClientSessionKeyProof));
Console.WriteLine("Server proof valid: {0}",
(object)secureRemotePassword2.IsServerProofValid(secureRemotePassword1.ServerSessionKeyProof));
}
public static void Test()
{
var srpParams = new SRPParameters();
BigInteger credentials = HashUtilities.HashToBigInteger(SRPParameters.Hash, "USER:PASSWORD");
var server = new SecureRemotePassword("USER", credentials, true, SRPParameters.Defaults);
var client = new SecureRemotePassword("USER", credentials, false, SRPParameters.Defaults);
/* Typical communication works something like this:
*
* client: I want to log in. Here is my username and here is my PublicEphemeralValueA.
* server: Here is the Salt and here is my PublicEphemeralValueB.
*
* Server looks up the username in the database and finds the associated password.
*
* client: Here's proof I have the correct session key (hence correct password)
* (sends client.ClientSessionKeyProof)
* server: Thats valid. Here's proof that *I* have the correct session key:
* (sends server.ServerSessionKeyProof)
*
* client: Cheerio. *encrypts stuff using SessionKey*
*/
Console.WriteLine("Client sending A = {0}", client.PublicEphemeralValueA.ToHexString());
server.PublicEphemeralValueA = client.PublicEphemeralValueA;
Console.WriteLine("Server sending salt = {0}", server.Salt.ToHexString());
Console.WriteLine("Server sending B = {0}", server.PublicEphemeralValueB.ToHexString());
client.Salt = server.Salt;
client.PublicEphemeralValueB = server.PublicEphemeralValueB;
/*
* Console.WriteLine("X = {0}", server.CredentialsHash.ToHexString());
* Console.WriteLine("a = {0}", client.secretEphemeralValueA.ToHexString());
* Console.WriteLine("b = {0}", server.secretEphemeralValueB.ToHexString());
* Console.WriteLine("v = {0}", server.Verifier.ToHexString());
* Console.WriteLine("U = {0}", server.ScramblingParameter.ToHexString());
*/
// Note that session keys are never sent.
Console.WriteLine("Server's session key = {0}", server.SessionKey.ToHexString());
Console.WriteLine("Client's session key = {0}", client.SessionKey.ToHexString());
// Are the session keys actually the same?
Console.WriteLine("\nServer key == client key {0}", server.SessionKey == client.SessionKey);
// This is how we can test it without sending actual session keys over the wire
Console.WriteLine("Client proof valid: {0}", server.IsClientProofValid(client.ClientSessionKeyProof));
Console.WriteLine("Server proof valid: {0}", client.IsServerProofValid(server.ServerSessionKeyProof));
}
/// <summary>
/// Computes a hash from hash data brokers using the given
/// hash algorithm, and generates a BigInteger from it
/// </summary>
/// <param name="algorithm"></param>
/// <param name="brokers"></param>
/// <returns></returns>
public static BigInteger HashToBigInteger(HashAlgorithm algorithm,
params HashUtilities.HashDataBroker[] brokers)
{
return(new BigInteger(HashUtilities.FinalizeHash(algorithm, brokers)));
}
public BigInteger Hash(params HashUtilities.HashDataBroker[] brokers)
{
return(HashUtilities.HashToBigInteger(SRPParameters.Hash, brokers));
}
public BigInteger Hash(params HashUtilities.HashDataBroker[] brokers)
{
return(HashUtilities.HashToBigInteger(SecureRemotePassword.SRPParameters.Hash, brokers));
}