Class SRP6Client

java.lang.Object
org.gudy.bouncycastle.crypto.agreement.srp.SRP6Client

public class SRP6Client extends Object
Implements the client side SRP-6a protocol. Note that this class is stateful, and therefore NOT threadsafe. This implementation of SRP is based on the optimized message sequence put forth by Thomas Wu in the paper "SRP-6: Improvements and Refinements to the Secure Remote Password Protocol, 2002"
  • Field Details

  • Constructor Details

    • SRP6Client

      public SRP6Client()
  • Method Details

    • init

      public void init(BigInteger N, BigInteger g, Digest digest, SecureRandom random)
      Initialises the client to begin new authentication attempt
      Parameters:
      N - The safe prime associated with the client's verifier
      g - The group parameter associated with the client's verifier
      digest - The digest algorithm associated with the client's verifier
      random - For key generation
    • generateClientCredentials

      public BigInteger generateClientCredentials(byte[] salt, byte[] identity, byte[] password)
      Generates client's credentials given the client's salt, identity and password
      Parameters:
      salt - The salt used in the client's verifier.
      identity - The user's identity (eg. username)
      password - The user's password
      Returns:
      Client's public value to send to server
    • calculateSecret

      public BigInteger calculateSecret(BigInteger serverB) throws CryptoException
      Generates client's verification message given the server's credentials
      Parameters:
      serverB - The server's credentials
      Returns:
      Client's verification message for the server
      Throws:
      CryptoException - If server's credentials are invalid
    • selectPrivateValue

      protected BigInteger selectPrivateValue()
    • calculateS

      private BigInteger calculateS()