public void Authenticate()
{
var clientFirstMessage = new ClientFirstMessage(_username, _nonce);
Send(clientFirstMessage.Message);
var serverFirstMessage = ServerFirstMessage.ParseResponse(Receive());
var hashedPassword = Hash.ComputeHash(Encoding.UTF8.GetBytes(_password), serverFirstMessage.Salt.Value,
serverFirstMessage.Iterations.Value);
var clientKey = Hash.ComputeHash(Encoding.UTF8.GetBytes("Client Key"), hashedPassword);
var serverKey = Hash.ComputeHash(Encoding.UTF8.GetBytes("Server Key"), hashedPassword);
var storedKey = Hash.ComputeHash(clientKey);
var clientFinalMessage = new ClientFinalMessage(clientFirstMessage, serverFirstMessage);
var authMessage =
$"{clientFirstMessage.BareMessage},{serverFirstMessage},{clientFinalMessage.MessageWithoutProof}";
var clientSignature = Hash.ComputeHash(Encoding.UTF8.GetBytes(authMessage), storedKey);
var serverSignature = Hash.ComputeHash(Encoding.UTF8.GetBytes(authMessage), serverKey);
var clientProof = clientKey.ExclusiveOr(clientSignature);
clientFinalMessage.SetProof(clientProof);
Send(clientFinalMessage.Message);
var serverFinalMessage = ServerFinalMessage.ParseResponse(Receive());
if (!serverFinalMessage.ServerSignature.Equals(serverSignature))
{
throw new InvalidOperationException();
}
}
private Response ProcessChallenge(Challenge tag)
{
_serverResponse = _encoding.GetString(tag.Bytes);
_serverFirstMessage = ServerFirstMessage.ParseResponse(_serverResponse);
_clientFinalMessage = new ClientFinalMessage(_clientFirstMessage, _serverFirstMessage);
CalculateProofs();
var message = Client.Registry.GetTag <Response>(Response.XmlName);
message.Bytes = _encoding.GetBytes(_clientFinalMessage.Message);
return(message);
}
private Tag ProcessChallenge(Tag tag)
{
_serverResponse = _encoding.GetString(tag.Bytes);
_serverFirstMessage = ServerFirstMessage.ParseResponse(_serverResponse);
Logger.Log(LogLevel.Debug, $"Server NONCE: {_serverFirstMessage.Nonce}");
_clientFinalMessage = new ClientFinalMessage(_clientFirstMessage, _serverFirstMessage);
CalculateProofs();
Logger.Log(LogLevel.Debug, $"Client final after proof: {_clientFinalMessage.Message}");
var message = Client.Registry.GetTag <Response>(Response.XmlName);
message.Bytes = _encoding.GetBytes(_clientFinalMessage.Message);
return(message);
}