Skip to content
/ srp Public

A set of Go functions for Secure Remote Password protocol implementation in 1Password Teams

License

Notifications You must be signed in to change notification settings

1Password/srp

Repository files navigation

srp – A Go package for Secure Remote Password

GoDoc: Reference License: Apache 2.0

srp is a Go language package for Secure Remote Password (SRP). It is an implementation of:

However, the hashing and padding scheme in this package is not interoperable with those specs.

It was developed by AgileBits to support part of the 1Password authentication process. Although there are some hooks and interfaces designed specifically for those purposes, this golang package may be of general use to others.

Get started

To install srp, use go get:

go get github.com/1Password/srp

Although the focus of this implementation is safety and ease of use (as opposed to speed), like all cryptographic tools, some understanding of its operation is required to not shoot yourself in the foot.

Read the package documentation for a discussion of user security responsibilities.

Contribute

Issues are appreciated. Forks leading to pull requests are appreciated even more. 😎

Gosec scans

To run the securego/gosec tool you need to have that installed. Then simply

gosec -fmt=json -out=path/to/where/you/want/results.json ./...

About

A set of Go functions for Secure Remote Password protocol implementation in 1Password Teams

Resources

License

Stars

Watchers

Forks

Packages

No packages published