💥 Derive public part of ephemeral pair

LinusU / secure-remote-password

A modern SRP implementation for Node.js and Web Browsers

101 stars 22 forks source link

💥 Derive public part of ephemeral pair #9

Closed LinusU closed 6 years ago

LinusU commented 6 years ago

Migration guide:

Several public functions have been modified to take only the secret or public part of the ephemeral pair, instead of taking the entire pair. This allows you to only persist one value instead of two when authenticating a user.

Affected functions:

Client side
- deriveSession now only takes secret part.
- verifySession now only takes public part.
Server side
- deriveSession now only takes secret part.

Fixes: #7

LinusU commented 6 years ago

@alexgoldstone, @simbo1905, would appreciate a review 🙂

LinusU commented 6 years ago

Awesome, let's merge and release!

LinusU commented 6 years ago

Published as 0.3.0