scram_client_proof

scram_client_proof :: (
    password: string,
    client_first_bare: string,
    binding: string,
    server_first: string,
    server_nonce: string,
    salt: string,
    iterations: s64
) -> (final: string, server_signature: [32] u8)

The client-final-message for a server-first-message, and the signature the server must prove it knows in its final message. binding is the GS2 header (plus the certificate hash for -PLUS), salt the decoded salt. Exported so the RFC 7677 example can be checked.

Parameters

password: string

the plain password.

client_first_bare: string

the client-first message without its GS2 header.

binding: string

the GS2 header, plus the certificate hash for -PLUS.

server_first: string

the server-first message, as received.

server_nonce: string

the r= value of the server-first message.

salt: string

the decoded s= value.

iterations: s64

the i= value.

Returns

final: string

server_signature: [32] u8