Examples of SRP6ClientSession

com.nimbusds.srp6.SRP6ClientSession

Stateful client-side Secure Remote Password (SRP-6a) authentication session. Handles the computing and storing of SRP-6a variables between the protocol steps as well as timeouts.

Usage:

Create a new SRP-6a client session for each authentication attempt.
If you wish to use custom routines for the password key 'x', the server evidence message 'M1', and / or the client evidence message 'M2' specify them at this point.
Proceed to {@link #step1 step one} by recording the input useridentity 'I' (submitted to the server) and password 'P'.
Proceed to {@link #step2 step two} on receiving the password salt's' and the public server value 'B' from the server. At this point the SRP-6a crypto parameters 'N', 'g' and 'H' must also be specified. These can either be agreed in advance between server and client or suggested by the server in its step one response.
Proceed to {@link #step3 step three} on receiving the serverevidence message 'M2'.

@author Vladimir Dzhuvinov

  
    // Step 1
  
    System.out.println("Client session step 1");
    
    SRP6ClientSession client = new SRP6ClientSession();
    
    User user = getUser("\t");
    client.step1(user.I, user.P);
  
    System.out.println();
    
    
    // Step 2
    
    System.out.println("Client session step 2");
    
    SRP6CryptoParams config = getConfig("\t");
    
    System.out.print("\tEnter salt 's' (hex): ");
    BigInteger s = readBigInteger();
    System.out.println();
    
    System.out.print("\tEnter public server value 'B' (hex): ");
    BigInteger B = readBigInteger();
    System.out.println();
    
    SRP6ClientCredentials cred;
    
    try {
      cred = client.step2(config, s, B);
      
    } catch (SRP6Exception e) {
      
      System.out.println(e.getMessage());
      return;
    }
    
    System.out.println("\tComputed public value 'A' (hex): " + BigIntegerUtils.toHex(cred.A));
    System.out.println("\tComputed evidence message 'M1' (hex): " + BigIntegerUtils.toHex(cred.M1));
    System.out.println();
    
    
    // Step 3
    
    System.out.println("Client session step 3");
    
    System.out.print("\tEnter server evidence message 'M2' (hex): ");
    
    BigInteger M2 = readBigInteger();
    
    try {
      client.step3(M2);
      
    } catch (SRP6Exception e) {
    
      System.out.println(e.getMessage());
      return;

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of SRP6ClientSession

Examples of com.nimbusds.srp6.SRP6ClientSession