133
edits
(Remove deprecated part) |
(→Peer authentication: update JPAKE round 2) |
||
| Line 33: | Line 33: | ||
# Client computes J-PAKE round 1 and sends the result to server. | # Client computes J-PAKE round 1 and sends the result to server. | ||
# Server generates PIN code and show on screen, computes J-PAKE round 1 and sends the result to client. | # Server generates PIN code and show on screen, computes J-PAKE round 1 and sends the result to client. | ||
# Server computes J-PAKE round 2 with PIN code attached first 12 characters as weak secret. | # Server computes J-PAKE round 2 with PIN code attached first 12 characters of server's TLS certificate fingerprint as weak secret. | ||
# User enter PIN code, client computs J-PAKE round 2 with PIN code attached first 12 characters as weak secret. | # User enter PIN code, client computs J-PAKE round 2 with PIN code attached first 12 characters of server's TLS certificate fingerprint as weak secret. | ||
# Client sends round 2 result to server. | # Client sends round 2 result to server. | ||
# Server dismisses PIN code notification on screen, sends round 2 result to client. | # Server dismisses PIN code notification on screen, sends round 2 result to client. | ||
edits