# Is SRP post-quantum secure?

Just a simple one: is SRP-6a post-quantum secure? If not, are there any post-quantum secure "SRP-6a-like" alternatives?

-

No, since finding $a$ allows offline checking of passwords. $\:$ No, although I can't back this part up.
That is what it refers to. $\:$ For S/KEY, I think a commitment scheme that is one-to-one non-malleable, extractable, and equivocable would suffice, although the only candidates for that which I can think of use at least multi-string setup. $\:$ What is "a similar alternative based on Lamport's scheme"? $\;\;\;\;$ –  Ricky Demer Aug 3 at 5:25