sessionKey property

Uint8List? get sessionKey

Shared symmetric session key derived during authentication.

Returns null if session key has not been derived yet (call deriveSessionKey or verifySession first).

This key can be used for encrypting messages between user and server, supplementing TLS encryption. Consider deriving separate keys from this master key using HKDF for different purposes (authentication, encryption, integrity).

Note that SRP can be used purely for authentication and generating a session token / cookie, and need not be used to encrypt messages.

Implementation

Uint8List? get sessionKey => _sessionKey != null ? Uint8List.fromList(_sessionKey!) : null;