summaryrefslogtreecommitdiff
path: root/javascript/srp.js
diff options
context:
space:
mode:
Diffstat (limited to 'javascript/srp.js')
-rw-r--r--javascript/srp.js181
1 files changed, 98 insertions, 83 deletions
diff --git a/javascript/srp.js b/javascript/srp.js
index cb788b3..ba14324 100644
--- a/javascript/srp.js
+++ b/javascript/srp.js
@@ -8,55 +8,63 @@ function SRP(username, password, ser, base_url)
var rng = new SecureRandom();
var a = new BigInteger(32, rng);
var A = g.modPow(a, N);
+ while(A.mod(N) == 0)
+ {
+ a = new BigInteger(32, rng);
+ A = g.modPow(a, N);
+ }
var Astr = A.toString(16);
- var B = null;
- var Bstr = null;
- var u = null;
- var x = null;
var S = null;
var K = null;
var M = null;
var M2 = null;
- var salt = null;
var url = base_url;
var server = ser;
var that = this;
var authenticated = false;
- var hash_import = false;
var I = username;
var p = password;
var xhr = null;
+ // *** Accessor methods ***
+
+ // Returns the user's identity
this.getI = function()
{
return I;
};
+
+ // Returns the XMLHttpRequest object
this.getxhr = function()
{
return xhr;
};
+
+ // Returns the base URL
this.geturl = function()
{
return url;
};
+ // Returns the BigInteger, g
this.getg = function()
{
return g;
};
+
+ // Returns the BigInteger, N
this.getN = function()
{
return N;
};
+
+ // Calculates the X value and return it as a BigInteger
this.calcX = function(s)
{
- return that.calcXp(s, p);
- };
- this.calcXp = function(s, ph)
- {
- return new BigInteger(SHA256(s + SHA256(I + ":" + ph)), 16);
+ return new BigInteger(SHA256(s + SHA256(I + ":" + p)), 16);
};
- function paths(str)
+ // Translates the django path to PHP and ASP.NET paths
+ this.paths = function(str)
{
// For now, str will be the django path
// This function will translate for other backends.
@@ -65,7 +73,21 @@ function SRP(username, password, ser, base_url)
return str;
}
};
- this.paths = paths;
+
+ // Get the text content of an XML node
+ this.innerxml = function(node)
+ {
+ return node.firstChild.nodeValue;
+ };
+
+ // Check whether or not a variable is defined
+ function isdefined ( variable)
+ {
+ return (typeof(window[variable]) != "undefined");
+ };
+
+ // *** Actions ***
+
// Perform ajax requests at the specified url, with the specified parameters
// Calling back the specified function.
this.ajaxRequest = function(full_url, params, callback)
@@ -96,21 +118,10 @@ function SRP(username, password, ser, base_url)
}
};
- // Get the text content of an XML node
- this.innerxml = function(node)
- {
- return node.firstChild.nodeValue;
- };
-
- // Check whether or not a variable is defined
- function isdefined ( variable)
- {
- return (typeof(window[variable]) != "undefined");
- };
// Start the login process by identifying the user
this.identify = function()
{
- var handshake_url = url + paths("handshake/");
+ var handshake_url = url + that.paths("handshake/");
var params = "I="+I+"&A="+Astr;
that.ajaxRequest(handshake_url, params, receive_salts);
};
@@ -122,27 +133,70 @@ function SRP(username, password, ser, base_url)
if(xhr.responseXML.getElementsByTagName("r").length > 0)
{
var response = xhr.responseXML.getElementsByTagName("r")[0];
+ // If there is no algorithm specified, calculate M given s, B, and P
if(!response.getAttribute("a"))
{
calculations(response.getAttribute("s"), response.getAttribute("B"), p);
- send_hash(M, confirm_authentication, url+paths("authenticate/"));
+ that.ajaxRequest(url+that.paths("authenticate/"), "M="+M, confirm_authentication);
}
+ // If there is an algorithm specified, start the login process
else
- {
upgrade(response.getAttribute("s"), response.getAttribute("B"), response.getAttribute("a"), response.getAttribute("d"));
- }
}
else if(xhr.responseXML.getElementsByTagName("error").length > 0)
+ that.error_message(xhr.responseXML.getElementsByTagName("error")[0]);
+ }
+ };
+ // Calculate S, M, and M2
+ // This is the client side of the SRP specification
+ function calculations(s, ephemeral, pass)
+ {
+ //S -> C: s | B
+ var B = new BigInteger(ephemeral, 16);
+ var Bstr = ephemeral;
+ // u = H(A,B)
+ var u = new BigInteger(SHA256(Astr + Bstr), 16);
+ // x = H(s, H(I:p))
+ var x = new BigInteger(SHA256(s + SHA256(I + ":" + pass)), 16);
+ //S = (B - kg^x) ^ (a + ux)
+ var kgx = k.multiply(g.modPow(x, N));
+ var aux = a.add(u.multiply(x));
+ S = B.subtract(kgx).modPow(aux, N);
+ // M = H(H(N) xor H(g), H(I), s, A, B, K)
+ var Mstr = A.toString(16) + B.toString(16) + S.toString(16);
+ M = SHA256(Mstr);
+ M2 = SHA256(A.toString(16) + M + S.toString(16));
+ //M2 = H(A, M, K)
+ };
+
+ // Receive M2 from the server and verify it
+ function confirm_authentication()
+ {
+ if(xhr.readyState == 4 && xhr.status == 200) {
+ if(xhr.responseXML.getElementsByTagName("M").length > 0)
{
- // This probably means A % N == 0, which means we need to generate
- // a new A and reidentify.
- that.identify();
+ if(that.innerxml(xhr.responseXML.getElementsByTagName("M")[0]) == M2)
+ {
+ that.success();
+ authenticated = true;
+ }
+ else
+ that.error_message("Server key does not match");
}
- }
+ else if (xhr.responseXML.getElementsByTagName("error").length > 0)
+ that.error_message(that.innerxml(xhr.responseXML.getElementsByTagName("error")[0]));
+ }
};
+
+ // *** Upgrades ***
+
+ // Start the process to upgrade the user's account
function upgrade(s,ephemeral,algo,dsalt)
{
+ // First we need to import the hash functions
import_hashes();
+
+ // Once the hash functions are imported, do the calculations using the hashpass as the password
function do_upgrade()
{
// If sha1 and md5 are still undefined, sleep again
@@ -155,12 +209,15 @@ function SRP(username, password, ser, base_url)
hashfun = SHA1;
else if(algo == "md5")
hashfun = MD5;
+ alert(hashfun(dsalt+p));
calculations(s, ephemeral, hashfun(dsalt+p));
- salt = s;
- send_hash(M, confirm_upgrade, url+paths("upgrade/authenticate/"));
+ that.ajaxRequest(url+that.paths("upgrade/authenticate/"), "M="+M, confirm_upgrade);
};
window.setTimeout(do_upgrade,10);
};
+
+ // Receive the server's M, confirming that the server has HASH(p)
+ // Next, send P in plaintext (this is the **only** time it should ever be sent plain text)
function confirm_upgrade()
{
if(xhr.readyState == 4 && xhr.status == 200) {
@@ -168,9 +225,8 @@ function SRP(username, password, ser, base_url)
{
if(that.innerxml(xhr.responseXML.getElementsByTagName("M")[0]) == M2)
{
- var params = "p="+p;
- var auth_url = that.geturl() + that.paths("upgrade/verifier/");
- that.ajaxRequest(auth_url, params, confirm_verifier);
+ var auth_url = url + that.paths("upgrade/verifier/");
+ that.ajaxRequest(auth_url, "p="+p, confirm_verifier);
}
else
that.error_message("Server key does not match");
@@ -181,60 +237,19 @@ function SRP(username, password, ser, base_url)
}
}
};
+
+ // After sending the password, check that the response is OK, then reidentify
function confirm_verifier()
{
if(xhr.readyState == 4 && xhr.status == 200) {
if(xhr.responseXML.getElementsByTagName("ok").length > 0)
that.identify();
+ else
+ that.error_message("Verifier could not be confirmed");
}
};
- // Calculate S, M, and M2
- function calculations(s, ephemeral, pass)
- {
- //S -> C: s | B
- B = new BigInteger(ephemeral, 16);
- Bstr = ephemeral;
- // u = H(A,B)
- u = new BigInteger(SHA256(Astr + Bstr), 16);
- // x = H(s, H(I:p))
- x = new BigInteger(SHA256(s + SHA256(I + ":" + pass)), 16);
- //S = (B - kg^x) ^ (a + ux)
- var kgx = k.multiply(g.modPow(x, N));
- var aux = a.add(u.multiply(x));
- S = B.subtract(kgx).modPow(aux, N);
- // M = H(H(N) xor H(g), H(I), s, A, B, K)
- var Mstr = A.toString(16) + B.toString(16) + S.toString(16);
- M = SHA256(Mstr);
- M2 = SHA256(A.toString(16) + M + S.toString(16));
- //M2 = H(A, M, K)
- };
- // Send M to the server
- function send_hash(M, confirm_fun, auth_url)
- {
- var params = "M="+M;
- that.ajaxRequest(auth_url, params, confirm_fun);
- };
- // Receive M2 from the server and verify it
- function confirm_authentication()
- {
- if(xhr.readyState == 4 && xhr.status == 200) {
- if(xhr.responseXML.getElementsByTagName("M").length > 0)
- {
- if(that.innerxml(xhr.responseXML.getElementsByTagName("M")[0]) == M2)
- {
- that.success();
- authenticated = true;
- }
- else
- that.error_message("Server key does not match");
- }
- else if (xhr.responseXML.getElementsByTagName("error").length > 0)
- {
- that.error_message(that.innerxml(xhr.responseXML.getElementsByTagName("error")[0]));
- }
- }
- };
+ // This loads javascript libraries. Fname is the path to the library to be imported
function import_file(fname)
{
var scriptElt = document.createElement('script');
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-05 19:52:31 +0000