spake2plus 0.1.0

SPAKE2+ (RFC 9383), the augmented password-authenticated key exchange: prover and verifier, no_std
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

# The crate, the fuzz targets beside it (fuzz/) and the planted lint
# violations (guards/rust-canary), which share its lints and lockfile. Only
# the crate is published, and only it is a default member.
[workspace]
members = [".", "fuzz", "guards/rust-canary"]
default-members = ["."]
resolver = "3"

# Warnings fail: bin/check runs clippy with `-D warnings`, so every lint below
# at "warn" is an error in the gate while staying readable in an editor.
[workspace.lints.rust]
unsafe_code = "forbid"
missing_docs = "warn"
unreachable_pub = "warn"
unused_qualifications = "warn"
let_underscore_drop = "warn"

[workspace.lints.rustdoc]
broken_intra_doc_links = "warn"
private_intra_doc_links = "warn"

[workspace.lints.clippy]
# rustfmt owns formatting; clippy is spent on defects.
pedantic = { level = "warn", priority = -1 }

# Suppressions name their lint, carry a reason and fail once stale: only
# #[expect(lint, reason = "...")] is allowed, never #[allow].
allow_attributes = "warn"
allow_attributes_without_reason = "warn"

# A library never panics on its caller's input, and never prints.
unwrap_used = "warn"
expect_used = "warn"
panic = "warn"
indexing_slicing = "warn"
todo = "warn"
unimplemented = "warn"
mem_forget = "warn"
print_stdout = "warn"
print_stderr = "warn"
dbg_macro = "warn"

# Thresholds live in clippy.toml.
cognitive_complexity = "warn"

[package]
name = "spake2plus"
version = "0.1.0"
authors = ["Felipe Zavan"]
edition = "2024"
# The oldest Rust this crate builds on; bin/check builds it there.
rust-version = "1.85.0"
description = "SPAKE2+ (RFC 9383), the augmented password-authenticated key exchange: prover and verifier, no_std"
license = "MIT"
repository = "https://github.com/zavan/spake2plus"
documentation = "https://docs.rs/spake2plus"
readme = "README.md"
keywords = ["spake2", "pake", "rfc9383", "key-exchange", "password"]
categories = ["cryptography", "no-std", "no-std::no-alloc"]
include = ["/src", "/tests", "/README.md", "/LICENSE", "/CHANGELOG.md"]

[dependencies]
hkdf = { version = "0.13.0", default-features = false }
hmac = { version = "0.13.0", default-features = false, features = ["zeroize"] }
p256 = { version = "0.14.0", default-features = false, features = ["arithmetic"] }
sha2 = { version = "0.11.0", default-features = false, features = ["zeroize"] }
subtle = { version = "2.6.1", default-features = false }
zeroize = { version = "1.9.0", default-features = false }

[dev-dependencies]
# Makes the registration example in the docs compile; not used by the crate.
pbkdf2 = { version = "0.13.0", default-features = false, features = ["hmac"] }
proptest = { version = "1.11.0", default-features = false, features = ["std"] }
# A real random number generator for the examples and the cross-role tests.
rand = "0.10.3"

[lints]
workspace = true

# Dependencies build optimized in development: the curve arithmetic in
# them is most of the tests' run time, and this crate's own code stays
# unoptimized and fully checked. Dependents never read these profiles.
[profile.dev.package."*"]
opt-level = 3