code wiki / hub / nx_opaque_pake.nx

nx_opaque_pake.nx

buildroot/runtime/hub/nx_opaque_pake.nx

23336 B538 linesdepth 13pulls 31 transitivereach 86 importersview sourcekind librarytopic opaque
docsdependenciesstructsconstsfunctions

about

nx_opaque_pake.nx -- V-MODAUTH-2c: RFC 9807 OPAQUE-3DH top level (registration + login). THE auth capability the charter calls the crown jewel: the wiki (and every Nishi site) gets password login where the server stores only a RegistrationRecord that is useless for offline cracking without the separate oprf_seed, and login produces a mutually-authenticated session_key without the password ever being comparable server-side. V1 DEPLOYMENT HONESTY: until the NishiLang->wasm browser client ships the wire PAKE (client-side Blind/KE1/KE3), the wiki daemon runs BOTH roles in-process on the passphrase it received over TLS. What OPAQUE buys ALREADY in that mode: nothing offline-crackable at rest, memory-hard KSF per guess, enumeration-resistant masked responses, and the EXACT RFC wire formats exercised end-to-end -- so the future wasm client speaks to this server with ZERO server change. The wire-PAKE client is the named follow-on rung (V-MODAUTH-8, JS-last-mile lane). Deterministic cores (*_det) take ALL randomness as arguments = RFC C.1.5/C.1.6 vectors drive them byte-exact; wrappers draw CSPRNG. Message sizes (sealed, = RFC wire format): RegistrationRequest 33 RegistrationResponse 66 RegistrationRecord 129 KE1 98 KE2 259 KE3 32 COMPOSES: hub/nx_opaque_core, hub/nx_opaque_envelope, hub/nx_opaque_3dh, hub/nx_voprf (+finalize), nx_csprng COMPOSED BY: hub/nx_modern_auth_flow (register/login bodies), future wasm client SPEC: RFC 9807 §5 (registration), §6 (online AKE), §6.3 (credential retrieval) license_tier: ORIGINAL

dependencies 14 imports · 2 importers

nx_syscalls.nx nx_u256.nx nx_csprng.nx sha256.nx nx_hmac.nx nx_hkdf.nx nx_p256_point.nx nx_p256_scalar_mul.nx nx_voprf.nx nx_voprf_finalize.nx nx_opaque_pake.nx nx_modern_auth_flow.nx nx_opaque_rfc_kat.nx

diagram shows first 10 each side; +4 more imports, +0 more importers in the complete lists below.

imports: nx_syscalls.nxnx_u256.nxnx_csprng.nxsha256.nxnx_hmac.nxnx_hkdf.nxnx_p256_point.nxnx_p256_scalar_mul.nxnx_voprf.nxnx_voprf_finalize.nxnx_h2c_p256.nxnx_opaque_core.nxnx_opaque_envelope.nxnx_opaque_3dh.nx

imported by: nx_modern_auth_flow.nxnx_opaque_rfc_kat.nx

structs

57struct NxOpqClientCfg
71struct NxOpqServerCfg

consts

46const NX_OPQ_REG_REQUEST_BYTES: i64 = 33
47const NX_OPQ_REG_RESPONSE_BYTES: i64 = 66
48const NX_OPQ_RECORD_BYTES: i64 = 129
49const NX_OPQ_REC_OFF_CPUB: i64 = 0
50const NX_OPQ_REC_OFF_MASKKEY: i64 = 33
51const NX_OPQ_REC_OFF_ENV: i64 = 65

functions

86func nx_opq_blind_det(input: *u8, input_n: i64, blind_32: *u8, out_blinded_33: *u8) -> i64
called by 2: nx_opaque_create_registration_request_detnx_opaque_generate_ke1_det calls 10: sys_mmap_voprf_load_dst_h2cp256_point_allocnx_h2c_hash_to_curve_p256p256_point_is_infinityu256_alloc+4
113func nx_opq_derive_oprf_key(
called by 2: nx_opaque_create_registration_responsenx_opaque_generate_ke2_det calls 3: sys_mmaphkdf_expandnx_opq_derive_keypair
140func nx_opaque_create_registration_request_det(
called by 1: ok_run_vector calls 1: nx_opq_blind_det
151func nx_opaque_create_registration_request(
called by 2: _ma_register_credentialok_run_random_roundtrip calls 1: nx_voprf_blind
166func nx_opaque_create_registration_response(
called by 3: _ma_register_credentialok_run_vectorok_run_random_roundtrip calls 3: sys_mmapnx_opq_derive_oprf_keynx_voprf_blind_evaluate
188func _opq_rwd_from_response(
called by 2: nx_opaque_finalize_registration_detnx_opaque_generate_ke3 calls 4: sys_mmapnx_voprf_finalizenx_opq_stretchnx_opq_randomized_password
206func nx_opaque_finalize_registration_det(
called by 2: nx_opaque_finalize_registrationok_run_vector calls 3: sys_mmap_opq_rwd_from_responsenx_opq_envelope_store_det
237func nx_opaque_finalize_registration(
called by 2: _ma_register_credentialok_run_random_roundtrip calls 3: sys_mmapnx_csprng_fillnx_opaque_finalize_registration_det
256func nx_opaque_generate_ke1_det(
called by 2: nx_opaque_generate_ke1ok_run_vector calls 2: nx_opq_blind_detnx_opq_derive_keypair
281func nx_opaque_generate_ke1(
called by 2: _ma_verify_credentialok_run_random_roundtrip calls 4: nx_voprf_random_scalarsys_mmapnx_csprng_fillnx_opaque_generate_ke1_det
298func nx_opaque_generate_ke2_det(
called by 2: nx_opaque_generate_ke2ok_run_vector calls 10: sys_mmapnx_opq_derive_oprf_keynx_voprf_blind_evaluatehkdf_expandnx_opq_derive_keypairnx_opq_preamble+4
411func nx_opaque_generate_ke2(
called by 2: _ma_verify_credentialok_run_random_roundtrip calls 3: sys_mmapnx_csprng_fillnx_opaque_generate_ke2_det
435func nx_opaque_generate_ke3(
called by 3: _ma_verify_credentialok_run_vectorok_run_random_roundtrip calls 11: sys_mmap_opq_rwd_from_responsenx_opq_masking_keyhkdf_expandnx_opq_envelope_recovernx_opq_preamble+5
531func nx_opaque_server_finish(ke3_32: *u8, expected_client_mac_32: *u8) -> i64
called by 3: _ma_verify_credentialok_run_vectorok_run_random_roundtrip calls 1: nx_opq_ct_eq