pub fn pake_passcode_verifier(
passcode: u32,
salt: &[u8],
iterations: u32,
) -> Result<[u8; 97]>Expand description
Serialize the SPAKE2+ PAKE passcode verifier w0 ‖ L (97 bytes) for a
setup passcode, as carried by the AdministratorCommissioning
OpenCommissioningWindow command’s PAKEPasscodeVerifier field
(Matter Core Spec §3.10 / Cluster spec §11.18).
w0 is the 32-byte big-endian PBKDF2-derived scalar; L = w1·P is the
65-byte SEC1-uncompressed P-256 point. This is a pure function of
(passcode, salt, iterations); it does not run a PASE session.
§Errors
Returns Error::PbkdfIterationsTooLow/…TooHigh/PbkdfSaltLengthInvalid
if iterations/salt are out of the spec range, or a derivation error.