From dfabbe5aa5a769c548f60d39513307cbd18266dc Mon Sep 17 00:00:00 2001
From: Paul Lietar <paul@lietar.net>
Date: Wed, 27 Jan 2016 10:44:15 +0000
Subject: [PATCH] Add Blob based authentication

---
 docs/authentication.md | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/docs/authentication.md b/docs/authentication.md
index cfe84f76..2e28769e 100644
--- a/docs/authentication.md
+++ b/docs/authentication.md
@@ -48,7 +48,13 @@ blob = AES128-CTR-DECRYPT(encryption_key, IV, encrypted)
 The blob is then used as described in the next section.
 
 ## Blob based Authentication
-TODO
 
+```
+data = b64_decode(blob)
+base_key = PBKDF2(SHA1(deviceID), username, 0x100, 1)
+key = SHA1(base_key) || htonl(len(base_key))
+login_data = AES192-DECRYPT(key, data)
+```
 ## Facebook based Authentication
 TODO
+