Overview | Package | Class | Tree | Serialized | Deprecated | Index | Help
| For the latest news and information visit The GNU Crypto project
PREV CLASS NEXT CLASS | FRAMES NO FRAMES
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD

## gnu.crypto.sasl.srp
Class PasswordFile

    java.lang.Object
      |
      +--gnu.crypto.sasl.srp.PasswordFile

public class PasswordFile
extends java.lang.Object

The implementation of SRP password files.

For SRP, there are three (3) files:

1. The password configuration file: tpasswd.conf. It contains the pairs <N,g> indexed by a number for each pair used for a user. By default, this file's pathname is constructed from the base password file pathname by prepending it with the ".conf" suffix.
2. The base password file: tpasswd. It contains the related password entries for all the users with values computed using SRP's default message digest algorithm: SHA-1 (with 160-bit output block size).
3. The extended password file: tpasswd2. Its name, by default, is constructed by adding the suffix "2" to the fully qualified pathname of the base password file. It contains, in addition to the same fields as the base password file, albeit with a different verifier value, an extra field identifying the message digest algorithm used to compute this (verifier) value.

This implementation assumes the following message digest algorithm codes:

- 0: the default hash algorithm, which is SHA-1 (or its alias SHA-160).
- 1: MD5.
- 2: RIPEMD-128.
- 3: RIPEMD-160.
- 4: SHA-256.
- 5: SHA-384.
- 6: SHA-512.

IMPORTANT: This method computes the verifiers as described in RFC-2945, which differs from the description given on the web page for SRP-6.

Reference:

1. SRP Protocol Design
   Thomas J. Wu.

Constructor Summary
`PasswordFile()`
`PasswordFile(java.io.File pwFile)`
`PasswordFile(java.lang.String pwName)`
`PasswordFile(java.lang.String pwName, java.lang.String confName)`
`PasswordFile(java.lang.String pwName, java.lang.String pw2Name, java.lang.String confName)`

Method Summary
`void` | `add(java.lang.String user, java.lang.String passwd, byte[] salt, java.lang.String index)`
`void` | `changePasswd(java.lang.String user, java.lang.String passwd)`
`boolean` | `contains(java.lang.String user)`
`boolean` | `containsConfig(java.lang.String index)` Checks if the current configuration file contains the <N, g> pair for the designated `index`.
`java.lang.String[]` | `lookup(java.lang.String user, java.lang.String mdName)` Returns the triplet: verifier, salt and configuration file index, of a designated user, and a designated message digest algorithm name, as an array of strings.
`java.lang.String[]` | `lookupConfig(java.lang.String index)` Returns a pair of strings representing the pair of `N` and `g` MPIs for the designated `index`.
`void` | `savePasswd()`

Methods inherited from class java.lang.Object
`clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

Constructor Detail

### PasswordFile

    public PasswordFile()
                 throws java.io.IOException

### PasswordFile

    public PasswordFile(java.io.File pwFile)
                 throws java.io.IOException

### PasswordFile

    public PasswordFile(java.lang.String pwName)
                 throws java.io.IOException

### PasswordFile

    public PasswordFile(java.lang.String pwName,
                        java.lang.String confName)
                 throws java.io.IOException

### PasswordFile

    public PasswordFile(java.lang.String pwName,
                        java.lang.String pw2Name,
                        java.lang.String confName)
                 throws java.io.IOException

Method Detail

### containsConfig

    public boolean containsConfig(java.lang.String index)
                           throws java.io.IOException

  Checks if the current configuration file contains the <N, g> pair for the designated `index`.

  Parameters:
    `index` - a string representing 1-digit identification of an <N, g> pair used.
  Returns:
    `true` if the designated `index` is that of a known <N, g> pair, and `false` otherwise.
  Throws:
    `java.io.IOException` - if an exception occurs during the process.
  See Also:
    `SRPRegistry.N_2048_BITS`, `SRPRegistry.N_1536_BITS`, `SRPRegistry.N_1280_BITS`, `SRPRegistry.N_1024_BITS`, `SRPRegistry.N_768_BITS`, `SRPRegistry.N_640_BITS`, `SRPRegistry.N_512_BITS`

### lookupConfig

    public java.lang.String[] lookupConfig(java.lang.String index)
                                    throws java.io.IOException

  Returns a pair of strings representing the pair of `N` and `g` MPIs for the designated `index`.

  Parameters:
    `index` - a string representing 1-digit identification of an <N, g> pair to look up.
  Returns:
    a pair of strings, arranged in an array, where the first (at index position #0) is the repesentation of the MPI `N`, and the second (at index position #1) is the representation of the MPI `g`. If the `index` refers to an unknown pair, then an empty string array is returned.
  Throws:
    `java.io.IOException` - if an exception occurs during the process.

### contains

    public boolean contains(java.lang.String user)
                     throws java.io.IOException

    `java.io.IOException`

### add

    public void add(java.lang.String user,
                    java.lang.String passwd,
                    byte[] salt,
                    java.lang.String index)
             throws java.io.IOException

    `java.io.IOException`

### changePasswd

    public void changePasswd(java.lang.String user,
                             java.lang.String passwd)
                      throws java.io.IOException

    `java.io.IOException`

### savePasswd

    public void savePasswd()
                    throws java.io.IOException

    `java.io.IOException`

### lookup

    public java.lang.String[] lookup(java.lang.String user,
                                     java.lang.String mdName)
                              throws java.io.IOException

  Returns the triplet: verifier, salt and configuration file index, of a designated user, and a designated message digest algorithm name, as an array of strings.

  Parameters:
    `user` - the username.
    `mdName` - the canonical name of the SRP's message digest algorithm.
  Returns:
    a string array containing, in this order, the BASE-64 encodings of the verifier, the salt and the index in the password configuration file of the MPIs N and g of the designated user.
    `java.io.IOException`

Overview | Package | Class | Tree | Serialized | Deprecated | Index | Help
| For the latest news and information visit The GNU Crypto project
PREV CLASS NEXT CLASS | FRAMES NO FRAMES
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD

Copyright © 2001, 2002, 2003, 2004 Free Software Foundation, Inc.