From 65ddaf633e95ac6114c12786d847467d5a47efb7 Mon Sep 17 00:00:00 2001 From: Tom Cocagne Date: Tue, 7 Dec 2010 16:38:53 -0500 Subject: alignment and spacing fixes --- doc/srp.rst | 27 +++++++++++++++------------ 1 file changed, 15 insertions(+), 12 deletions(-) (limited to 'doc') diff --git a/doc/srp.rst b/doc/srp.rst index f566763..507c92e 100644 --- a/doc/srp.rst +++ b/doc/srp.rst @@ -290,17 +290,19 @@ a,b Secret, random values K Session key ========= ================================================================= -============================ ==================================== -Derived Values Description -============================ ==================================== -k = H(N,g) Multiplier Parameter -A = g^a Public ephemeral value -B = kv + g^b Public ephemeral value -x = H( s, H( I | ':' | p ) ) Private key (as defined by RFC 5054) -v = g^x Password verifier -u = H(A,B) Random scrambling parameter -M = H(H(N) xor H(g), H(I), s, A, B, K) Session key verifier -====================================== ==================================== + +====================================== ===================================== +Derived Values Description +====================================== ===================================== +k = H(N,g) Multiplier Parameter +A = g^a Public ephemeral value +B = kv + g^b Public ephemeral value +x = H( s, H( I | ':' | p ) ) Private key (as defined by RFC 5054) +v = g^x Password verifier +u = H(A,B) Random scrambling parameter +M = H(H(N) xor H(g), H(I), s, A, B, K) Session key verifier +====================================== ===================================== + The server stores the password verifier *v*. Authentication begins with a message from the client:: @@ -318,6 +320,7 @@ At this point, both the client and server calculate the shared session key:: :: server: K = H( (Av^u) ^ b ) + :: client: x = H( s, H( I + ':' + p ) ) @@ -333,4 +336,4 @@ SRP 6a requires the two parties to use the following safeguards: 1) The client will abort if it recieves B == 0 (mod N) or u == 0 1) The server will abort if it detects A == 0 (mod N) 1) The client must show its proof of K first. If the server detects that this - proof is incorrect it must abort without showing its own proof of K \ No newline at end of file +proof is incorrect it must abort without showing its own proof of K \ No newline at end of file -- cgit v1.2.3