hofmann-rfc 2.0.0

Rust implementation of RFC 9380 (Hash-to-Curve), RFC 9497 (OPRF), and RFC 9807 (OPAQUE)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

//! RFC 9807 OPAQUE-3DH asymmetric PAKE protocol.
//!
//! OPAQUE allows a client to authenticate to a server using a password without
//! the server ever learning the password. The protocol has two phases:
//!
//! 1. **Registration** — client registers a password; server stores an
//!    [`RegistrationRecord`](model::RegistrationRecord) (no plaintext password).
//! 2. **Authentication** — three-message AKE (KE1 → KE2 → KE3) producing a
//!    shared session key.
//!
//! # Entry points
//!
//! - [`OpaqueClient`] — client-side registration and authentication
//! - [`OpaqueServer`] — server-side registration, authentication, and fake KE2
//!   generation for user enumeration protection
//! - [`config`] — cipher suite selection, key stretching, protocol configuration
//! - [`model`] — protocol message types (KE1, KE2, KE3, Envelope, etc.)

mod client;
pub mod config;
pub mod internal;
pub mod model;
mod server;

pub use client::OpaqueClient;
pub use server::OpaqueServer;