dcousens / habanero

An attempt-limiting, remote pepper provisioning protocol with a bundled Javascript implementation.

habanero

An experimental attempt-limiting, remote pepper provisioning protocol with a bundled Javascript implementation.

WARNING: This protocol has not been peer reviewed - use at your own risk.

Protocol

Example

let hb = require('habanero/server')
let e = Buffer.from(process.env.HABANERO_SECRET, 'ascii')

// ...
hb.get(e, commitment, P, queryCb, limitCb, (err, result) => {
	if (err) return res.status(500).end()
	if (result.limited) return res.status(403).end() // optional (information leak)
	if (!result.pepper) return res.status(401).end()

	res.status(200).json(result)
})

LICENSE MIT