Skip to main content

pake_passcode_verifier

Function pake_passcode_verifier 

Source
pub fn pake_passcode_verifier(
    passcode: u32,
    salt: &[u8],
    iterations: u32,
) -> Result<[u8; 97]>
Expand description

Serialize the SPAKE2+ PAKE passcode verifier w0 ‖ L (97 bytes) for a setup passcode, as carried by the AdministratorCommissioning OpenCommissioningWindow command’s PAKEPasscodeVerifier field (Matter Core Spec §3.10 / Cluster spec §11.18).

w0 is the 32-byte big-endian PBKDF2-derived scalar; L = w1·P is the 65-byte SEC1-uncompressed P-256 point. This is a pure function of (passcode, salt, iterations); it does not run a PASE session.

§Errors

Returns Error::PbkdfIterationsTooLow/…TooHigh/PbkdfSaltLengthInvalid if iterations/salt are out of the spec range, or a derivation error.