Module setup 

Server setup and client verification (paper Algorithm 4, spec §6.1 FR-S1..S8).

h, f are derived from aux = setup_id ‖ u32be(len(server_id)) ‖ server_id; the server draws setup_id at random. sid = SHA-256(canonical SetupData bytes) is the value the application pins (FR-S8).

Structs

ServerSetupSecret

Secret output of the server setup. Zeroized on drop (the key zeroizes itself).

SetupData

Public setup of the server (spec §6.1).

VerifiedSetup

Setup that passed FR-S7.

Constants

DF_TABLE_WINDOW

Window of the fixed-base tables for t, s₁, s₂.

FORMAT_VERSION

Canonical format version (first byte of the encoding).

MAX_SERVER_ID_LEN

Maximal length of the server identifier.

RHO_TABLE_WINDOW

Window of the fixed-base table for ρ.

Functions

server_setup

Server setup with the standard Π_fac group.

server_setup_with

Server setup with an explicit Π_fac group (tests).