Post #3803450

starting an uptime-miku progress thread because i can! today i finished rewriting the login logic to use password-authenticated key exchange (PAKE), namely OPAQUE with Argon2id, SHA-2 and Ristretto255. This was obviously inspired by @kora@chaos.social telling me about PAKE which despite my general crypto knowledge had never crossed my path. so now logins are super secure! it was actually surprisingly easy to get this working, the opaque_ke crate has copy-paste-able examples for login and registration.