Tizian 「ティツィアーン」
e8953d1560
A third subkey of the password's Argon2id (context `hlkpass1`, subkey 3) seeds an Ed25519 pair: `PasswordKeys.proofKeyPair` and `proofPublicKey`. An account that keeps no SRP verifier proves its password by signing the register's nonce with it, as it proves the recovery phrase; neither SRP's verifier nor the unwrapped account keys a signed-in device keeps can make it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
33 lines
1.3 KiB
Dart
33 lines
1.3 KiB
Dart
/// An account's keys on the device (ADR 0017): what the password unlocks
|
|
/// (Argon2id, split into SRP's x, the key-encryption key and the password's
|
|
/// proof key), the account's
|
|
/// key pairs and their wrapping, the recovery phrase and its key, data keys
|
|
/// sealed to the account, and content sealed and signed in ADR 0002's
|
|
/// envelope. libsodium (the `sodium` package, its sumo API for Argon2id)
|
|
/// does every primitive; nothing here is ever sent but what is wrapped,
|
|
/// sealed or public.
|
|
library;
|
|
|
|
export 'src/account_keys.dart'
|
|
show AccountKeys, WrappedAccountKeys, unwrapAccountKeys, wrapAccountKeys;
|
|
export 'src/data_keys.dart' show DataKey, openDataKey, sealDataKey;
|
|
export 'src/key_refused.dart';
|
|
export 'src/password_keys.dart'
|
|
show PasswordKdf, PasswordKeys, derivePasswordKeys, newPasswordSalt;
|
|
export 'src/password_text.dart'
|
|
show
|
|
PasswordRefusal,
|
|
PasswordRefused,
|
|
checkNewPassword,
|
|
newPasswordMinLength,
|
|
normalizePassword;
|
|
export 'src/recovery_phrase.dart'
|
|
show
|
|
entropyOfRecoveryPhrase,
|
|
newRecoveryPhrase,
|
|
recoveryEntropyBytes,
|
|
recoveryKeyOf,
|
|
recoveryPhraseOf,
|
|
recoveryProofKeysOf,
|
|
recoveryProofPublicKeyOf;
|
|
export 'src/sealed_content.dart' show SealedContent, openContent, sealContent;
|