stef / libsphinx

Sphinx-based Password Storage low-level library

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

usage of chal in finish

udf2457 opened this issue · comments

My c knowledge is not the greatest, but I can't seem to understand what chal is doing as an input to sphinx_finish ?

As far as I can see it is only used twice, once in a debug dump and once in memcmp. So unless I've missed it, it seems to have no meaningful use ?

the memcmp is important. it checks that the response is not equal to the challenge.

but, this whole lib will be replaced with liboprf in sphinx v2.0 - to 1/ be conformant with the IRTF/CFRG OPRF spec and to 2/ allow the threshold setup.

pls close this issue if it answers your question.

Thanks !