def test_arbitrary_element(self):
for i in range(20):
seed = str(i).encode("ascii")
e = arbitrary_element(seed)
e2 = arbitrary_element(seed)
self.assertElementsEqual(e, e2)
def test_arbitrary_element(self):
for i in range(20):
seed = str(i).encode("ascii")
e = arbitrary_element(seed)
e2 = arbitrary_element(seed)
self.assertElementsEqual(e, e2)
from hashlib import sha256
from pyblake2 import blake2b
from pure25519.basic import (arbitrary_element, bytes_to_element, Base,
random_scalar, password_to_scalar)
# a,b random. X=G*a+U*pw. Y=G*b+V*pw. Z1=(Y-V*pw)*a. Z2=(X-U*pw)*b
U = arbitrary_element(b"U")
V = arbitrary_element(b"V")
def _start(pw, entropy_f, blinding):
a = random_scalar(entropy_f)
pw_scalar = password_to_scalar(pw)
X = Base.scalarmult(a).add(blinding.scalarmult(pw_scalar))
X_s = X.to_bytes()
return (a, pw_scalar), X_s
def _finish(start_data, Y_s, blinding):
(a, pw_scalar) = start_data
Y = bytes_to_element(Y_s) # rejects zero and non-group
Z = Y.add(blinding.scalarmult(-pw_scalar)).scalarmult(a)
return Z.to_bytes()
def start_U(pw, entropy_f, idA, idB, U=U, V=V):
sdata, X_s = _start(pw, entropy_f, U)
start_data = (sdata, pw, X_s, idA, idB, U, V)
return start_data, X_s
from hashlib import sha256
from pure25519.basic import (arbitrary_element, bytes_to_element, Base,
random_scalar, password_to_scalar)
# a,b random. X=G*a+U*pw. Y=G*b+V*pw. Z1=(Y-V*pw)*a. Z2=(X-U*pw)*b
U = arbitrary_element(b"U")
V = arbitrary_element(b"V")
def _start(pw, entropy_f, blinding):
a = random_scalar(entropy_f)
pw_scalar = password_to_scalar(pw)
X = Base.scalarmult(a).add(blinding.scalarmult(pw_scalar))
X_s = X.to_bytes()
return (a, pw_scalar), X_s
def _finish(start_data, Y_s, blinding):
(a, pw_scalar) = start_data
Y = bytes_to_element(Y_s) # rejects zero and non-group
Z = Y.add(blinding.scalarmult(-pw_scalar)).scalarmult(a)
return Z.to_bytes()
def start_U(pw, entropy_f, idA, idB, U=U, V=V):
sdata, X_s = _start(pw, entropy_f, U)
start_data = (sdata, pw, X_s, idA, idB, U, V)
return start_data, X_s
def finish_U(start_data, Y_s):
(sdata, pw, X_s, idA, idB, U, V) = start_data
Z_s = _finish(sdata, Y_s, V)
