use hashed key to compute M

include salt in client proof

exclude password from hash used in client proof

include username in client proof

clippy: needless borrow

rfc compliant client proof

Update Cargo.lock

srp: bump `rand` to v0.8 (#113)

It's under `dev-dependencies` and used for tests.

srp: switch from `sha-1` to `sha1` (#112)

The former is deprecated. Note: `dev-dependencies` only

Extend Dependabot configuration to keep GitHub Actions up to date (#108)

Update actions used in GitHub Actions workflows to newest version (#106)

Fix a typo (#107)

build(deps): bump digest from 0.10.2 to 0.10.5 (#104)

Bumps [digest](https://github.com/RustCrypto/traits) from 0.10.2 to 0.10.5.
- [Release notes](https://github.com/RustCrypto/traits/releases)
- [Commits](https://github.com/RustCrypto/traits/compare/digest-v0.10.2...digest-v0.10.5)

---
updated-dependencies:
- dependency-name: digest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump generic-array from 0.14.5 to 0.14.6 (#103)

Bumps [generic-array](https://github.com/fizyk20/generic-array) from 0.14.5 to 0.14.6.
- [Release notes](https://github.com/fizyk20/generic-array/releases)
- [Changelog](https://github.com/fizyk20/generic-array/blob/master/CHANGELOG.md)
- [Commits](https://github.com/fizyk20/generic-array/commits)

---
updated-dependencies:
- dependency-name: generic-array
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

update Cargo.lock

build(deps): bump hkdf from 0.12.0 to 0.12.2 (#94)

Bumps [hkdf](https://github.com/RustCrypto/KDFs) from 0.12.0 to 0.12.2.
- [Release notes](https://github.com/RustCrypto/KDFs/releases)
- [Commits](https://github.com/RustCrypto/KDFs/compare/hkdf-v0.12.0...hkdf-v0.12.2)

---
updated-dependencies:
- dependency-name: hkdf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

spake2 v0.3.1 (#92)

spake2: refactor internals (#91)

Splits the crate apart into multiple modules

spake2: rustdoc fixup

spake2 v0.3.0 (#90)

spake2: capitalization and doc fixes (#89)

Renames the following:

- `SPAKE2` => `Spake2`
- `SPAKEErr` -> `Error`

Additionally lints for `missing_docs` and adds preliminary documentation
for all types and methods which previously had none.

spake2: getrandom feature (#88)

Makes `getrandom` an optional on-by-default feature

Adds CI for `thumbv7em-none-eabi` targets

spake2: initial `no_std` support (#87)

Still has a hard dependency on `alloc`, and with the current hard
dependency on `getrandom` also limited platform support

spake2: bump `hkdf` to v0.12; `sha2` to v0.10 (#86)

spake2: bump `curve25519-dalek` to v3.0; `rand_core` => v0.5 (#85)

This is a continuation of #33.

It bumps `curve25519-dalek` to the latest stable release and replaces
the `rand` crate with the version of `rand_core` which is compatible
with `curve25519-dalek`: v0.5 (which is still a version behind)

Bump generic-array from 0.14.4 to 0.14.5 (#82)

Bumps [generic-array](https://github.com/fizyk20/generic-array) from 0.14.4 to 0.14.5.
- [Release notes](https://github.com/fizyk20/generic-array/releases)
- [Changelog](https://github.com/fizyk20/generic-array/blob/master/CHANGELOG.md)
- [Commits](https://github.com/fizyk20/generic-array/commits)

---
updated-dependencies:
- dependency-name: generic-array
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

README.md: remove outdated MSRV docs

srp v0.6.0 (#84)

srp: rebuild library (#79)

Complete rewrite of the SRP library.

Includes many improvements over the old library:

- Improved file and code organization
- Access to individual SRP computations
- Consistent sever and client API
- Simpler API
- Improved documentation with tests in documentation
- New tests for compatibility with the RFC
- Bumps dependencies
- Timing safe verification comparisons
- Modernized error handling

2021 edition bump + doc improvements; MSRV 1.56 (#80)

- Bumps both `spake2` and `srp` to Rust 2021 edition
- Uses the new `doc = include_str!(...)` attribute to include README.md
  files in the rustdoc
- Improves the README.md files, adding an initial one for `srp`
- clippy fixes for Rust 1.56

srp: replace custom powm with modpow (#78)

Bump num-bigint from 0.4.1 to 0.4.2 (#68)

Bumps [num-bigint](https://github.com/rust-num/num-bigint) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/rust-num/num-bigint/releases)
- [Changelog](https://github.com/rust-num/num-bigint/blob/master/RELEASES.md)
- [Commits](https://github.com/rust-num/num-bigint/compare/num-bigint-0.4.1...num-bigint-0.4.2)

---
updated-dependencies:
- dependency-name: num-bigint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump sha2 from 0.9.7 to 0.9.8 (#70)

Bump sha2 from 0.9.6 to 0.9.7 (#69)

Bump num-bigint from 0.4.0 to 0.4.1 (#67)

Bumps [num-bigint](https://github.com/rust-num/num-bigint) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/rust-num/num-bigint/releases)
- [Changelog](https://github.com/rust-num/num-bigint/blob/master/RELEASES.md)
- [Commits](https://github.com/rust-num/num-bigint/compare/num-bigint-0.4.0...num-bigint-0.4.1)

---
updated-dependencies:
- dependency-name: num-bigint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump sha2 from 0.9.5 to 0.9.6 (#66)

Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.9.5 to 0.9.6.
- [Release notes](https://github.com/RustCrypto/hashes/releases)
- [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.9.5...sha2-v0.9.6)

---
updated-dependencies:
- dependency-name: sha2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump sha-1 from 0.9.7 to 0.9.8 (#65)

Bumps [sha-1](https://github.com/RustCrypto/hashes) from 0.9.7 to 0.9.8.
- [Release notes](https://github.com/RustCrypto/hashes/releases)
- [Commits](https://github.com/RustCrypto/hashes/compare/sha-1-v0.9.7...sha-1-v0.9.8)

---
updated-dependencies:
- dependency-name: sha-1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Cargo.lock: bump dependencies (#64)

spake2: bump `hkdf` dependency to v0.11 (#63)

Fix typo over -> other (#60)

Bump sha-1 from 0.9.6 to 0.9.7 (#59)

Bumps [sha-1](https://github.com/RustCrypto/hashes) from 0.9.6 to 0.9.7.
- [Release notes](https://github.com/RustCrypto/hashes/releases)
- [Commits](https://github.com/RustCrypto/hashes/compare/sha-1-v0.9.6...sha-1-v0.9.7)

---
updated-dependencies:
- dependency-name: sha-1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

srp: fix typos in docstrings (#58)

This fixes a few minor typos in docstrings.

Bump sha-1 from 0.9.4 to 0.9.6 (#56)

Bumps [sha-1](https://github.com/RustCrypto/hashes) from 0.9.4 to 0.9.6.
- [Release notes](https://github.com/RustCrypto/hashes/releases)
- [Commits](https://github.com/RustCrypto/hashes/compare/sha-1-v0.9.4...sha-1-v0.9.6)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Cargo.lock: bump dependencies (#52)

Bump num-bigint from 0.2.6 to 0.4.0 (#46)

Bumps [num-bigint](https://github.com/rust-num/num-bigint) from 0.2.6 to 0.4.0.
- [Release notes](https://github.com/rust-num/num-bigint/releases)
- [Changelog](https://github.com/rust-num/num-bigint/blob/master/RELEASES.md)
- [Commits](https://github.com/rust-num/num-bigint/compare/num-bigint-0.2.6...num-bigint-0.4.0)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump generic-array from 0.12.3 to 0.14.4 (#45)

Bumps [generic-array](https://github.com/fizyk20/generic-array) from 0.12.3 to 0.14.4.
- [Release notes](https://github.com/fizyk20/generic-array/releases)
- [Changelog](https://github.com/fizyk20/generic-array/blob/master/CHANGELOG.md)
- [Commits](https://github.com/fizyk20/generic-array/compare/0.12.3...0.14.4)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Add Dependabot config (#43)

Migrate to GitHub Actions (#42)

Uses the standard boilerplate we've been using for other projects

Edit badges

srp v0.5.0 (#38)

Bump digest, sha-1, and sha2 dependencies to v0.9 (#37)

Bump MSRV to 1.41.0 (#36)

srp v0.4.3

remove num_traits dep

spake2: update to hex-0.4

Switch from num to num-traits and num-bigint (#31)

Merge branch 'pr28'

Fix spelling errors.

spake2: tighten the curve25519-dalek dependency to 1.2.x

This was just "1", which allowed our MSRV to be accidentally raised from 1.31
to 1.32 without a deliberate spake2 minor-version bump (dalek-1.0.x compiles
with rustc-1.31, but dalek-1.1.x required 1.32).

Hopefully by making it "1.2", our MSRV will remain at 1.32 until we
explicitly decide to take on a dependency that needs something newer.

refs #21

travis: use rust 'stable' for rustfmt check

This was previously locked down at a specific version (1.31.0, much older
than the current 1.36), so we'd get consistent behavior over time. But since
we allow the rustfmt build to fail (it's in allow_failures), we don't need
this consistency so much. PR authors are expected to format their code
against the current stable rustfmt, but test it against the MSRV (currently
1.32.0).

refs #21

Merge branch '21-pin-travis'

refs #21

document MSRV, remove 1.31.1 from travis

oops, be more specific about the rust version: 1.32.0

travis: exercise 1.31.1 and 1.32

1.31.1 is our intended MSRV (Minimum Supported Rust Version), but we probably
don't actually work there because of an insufficiently-constrained dependency
that requires 1.32.

1.32 is probably our actual MSRV, and will be the one we aim for going
forward.

refs #21

Merge branch '21-update-hkdf'

refs #21

update spake2 to current hkdf-0.8

spake2/Cargo.toml: num-bigint is merely a dev-dependency

We only use it in unit tests.

This might help with no-std, so refs #15

srp doc fix. closes #16

(cargo-release) start next development iteration spake2-v0.2.1-alpha.0

(cargo-release) spake2-v0.2.0

srp: release srp-0.4.0

Merge branch 'edition-2018'

srp/Cargo.toml: remember to bump minor version for next release

Since edition=2018 means we'll require rust-1.31

Use curve25519-dalek v1

update srp to idioms of edition-2018

srp: fix to work with edition-2018

srp: fix some low-hanging clippy warnings

update spake2 to edition-2018

reformat using rustfmt from latest 1.31.0

spake2: Merge PR11: better Debug impl

add group name to SPAKE2 Debug impl

More idiomatic Debug impl

travis: update RUSTFMT to use rust-1.30 instead of 1.29

Merge PR10: update-deps

fix rustfmt

deps: update srp to lazy_static-1.2

deps: update to rand-0.6

fix spake2 doctests

spake2: add docs and basic doctest to lib.rs

update SRP dependencies

README: add deps.rs badge

update spake2 deps (sha2-0.8, hkdf-0.7)

travis: allow rustfmt to fail

I'm on the fence about this, but I have to admit that having your PR fail
because of formatting issues isn't a great experience for new contributors.

We will need to run `cargo fmt` ourselves on a regular basis.

spake2 code reorganization (#6)

add doc logo

replaced / with OR in license fields

(cargo-release) start next development iteration spake2-v0.1.2-alpha.0

(cargo-release) spake2-v0.1.1

spake2/Cargo.toml: update keywords, description, categories

spake2: update to latest deps (curve25519-dalek-0.21)