CPace-Ristretto255, a balanced PAKE

A CPace implementation for Rust.

This is a port of the CPace implementation for libsodium.

Blurb

CPace is a protocol for two parties that share a low-entropy secret (password) to derive a strong shared key without disclosing the secret to offline dictionary attacks.

CPace is a balanced PAKE, meaning that both parties must know the low-entropy secret.

Applications include pairing IoT and mobile applications using ephemeral pin codes, QR-codes, serial numbers, etc.

Usage

The CPace protocol requires a single round trip.

It returns a set of two 256-bit (SHARED_KEY_BYTES bytes) keys that can be used to communicate in both directions.

```rust let client = CPace::step1("password", "client", "server", Some("ad")).unwrap(); let step2 = CPace::step2(&client.packet(), "password", "client", "server", Some("ad")).unwrap();

let shared_keys = client.step3(&step2.packet()).unwrap();

asserteq!(sharedkeys.k1, step2.sharedkeys.k1); asserteq!(sharedkeys.k2, step2.sharedkeys.k2); ```

Notes