J-PAKE Again
When I wrote last week that I had implemented a J-PAKE demo someone rather churlishly commented, “not a demo till it runs on two machines, with a toy browser and toy server”.
So, this weekend I implemented J-PAKE as a proper OpenSSL module. Plus support in s_server
and s_client
. You can test it like this:
openssl s_server -jpake secret
openssl s_client -jpake secret
If you want to use two different machines, as required by Mr. Churlish, then you’ll need to use the -connect
option to s_client
.
If you want to use it yourself, you can find example code in apps/apps.c
. Look for the functions jpake_client_auth()
and jpake_server_auth()
.
[…] Update (2008-06-28): J-PAKE demo source code (.java). Update (2008-11-04): (more refined) J-PAKE demo source code (.c) by Ben Laurie (see also in OpenSSL). […]
Pingback by Light Blue Touchpaper » Blog Archive » J-PAKE: From Dining Cryptographers to Jugglers — 4 Nov 2008 @ 14:41