topic: opaque
12 modules sharing the opaque name family (derived from the tree's prefix discipline).
The 'opaque' topic family implements the OPAQUE protocol (RFC 9807) for secure, no-cookie authentication in the Nishi sovereign ecosystem. It provides core primitives through nx_opaque_core, supports key scheduling with nx_opaque_3dh, and manages client credential envelopes via nx_opaque_envelope. The login logic, encapsulated in nx_opaque_login, operates alongside a daemon and route table to enable seamless, over-the-wire authentication flows, ensuring robust identity verification without reliance on traditional session cookies.
auto-narrated by the local model from this topic's module headers; links verified against the wiki index.
narrated overview -- maintained by the narration lane, module links verified against this wiki.
| module | description | lines | funcs |
|---|---|---|---|
| nx_opaque_3dh.nx | V-MODAUTH-2b: RFC 9807 §6.4 OPAQUE-3DH key schedule. | 180 | 3 |
| nx_opaque_core.nx | V-MODAUTH-2a: OPAQUE (RFC 9807) shared primitives. | 408 | 11 |
| nx_opaque_envelope.nx | V-MODAUTH-2a: RFC 9807 §4 client credential Envelope (Store / Recover). | 242 | 6 |
| nx_opaque_kat_register.nx | registers the OPAQUE auth arc (V-MODAUTH-2/4/6/7). | 52 | 2 |
| nx_opaque_login.nx | no-cookie OPAQUE login LOGIC (the wiki's model, FULL OPAQUE / modauth, RFC 9807). | 131 | 9 |
| nx_opaque_login_daemon.nx | R2: thin HTTP daemon wrapping the gated no-cookie OPAQUE login (nx_opaque_login). | 567 | 22 |
| nx_opaque_login_gate.nx | KAT for the no-cookie OPAQUE login seam. Drives the FULL over-the-wire flow | 64 | 2 |
| nx_opaque_login_routes.nx | the SHARED route table for the no-cookie OPAQUE login. Builds a full HTTP | 187 | 12 |
| nx_opaque_login_smoke.nx | R2 smoke: fork the OPAQUE login daemon, drive it as a REAL HTTP client over a | 230 | 8 |
| nx_opaque_login_tls_daemon.nx | R3-B: the no-cookie OPAQUE login served over SOVEREIGN TLS 1.3 (ECDSA | 93 | 2 |
| nx_opaque_pake.nx | V-MODAUTH-2c: RFC 9807 OPAQUE-3DH top level (registration + login). | 538 | 14 |
| nx_opaque_rfc_kat.nx | ENGINEER gate: OPAQUE-3DH (RFC 9807) vs the RFC's OWN P-256 vectors. | 335 | 11 |