cocagne/csrp — pull request #2 by promovicz (2013-04-18 22:24:37+00:00)
Title: Fix rfc5054 compat

Hi!

I'm a colleague of the guy who did the last pull request to your nice little library.

While verifying your library for use with our own SRP implementation (which is based on Bouncy Castle), we found that your library is actually not compliant to RFC5054.

These two patches fix this, however they make csrp incompatible with older versions of itself, so you might want to introduce some sort of compatibility hack.

The patches have been verified against our implementation. I have also verified them against the RFC5054 test vectors manually. Note that these vectors only cover the first phase (key negotiation), not the verification phase. This is because TLS-SRP, specified in said RFC, does not require a verification phase.

Greetings from Berlin
Ingo