canmove, Confirmed users
725
edits
(→Flow) |
|||
| Line 35: | Line 35: | ||
*Key: strong secret that both clients derive through J-PAKE | *Key: strong secret that both clients derive through J-PAKE | ||
== | == Data format == | ||
All request and response bodies are JSON objects as produced by <a href="http://github.com/warner/python-jpake">python-jpake</a> (messages 1 and 2) and specified below. An '''application/json''' HTTP Content-Type header is optional. Within the JSON objects, | |||
<ul> | <ul> | ||
<li> | <li>the big numbers are encoded as hex strings (messages 1 and 2),</li> | ||
<li> | <li>the hash in message 3 is hex encoded,</li> | ||
<li> | <li>the ciphertext, IV and hmac are encoded in Base64 (messages 3)</li> | ||
</ul> | </ul> | ||