Secure remote password protocol
3
votes
0answers
46 views
Why is TLS SRP verifier based on user name?
I don't understand why TLS SRP (or SRP in general) includes the user name in verifier calculation, given that user name is basically public.
From spec RFC 5054 $x$, which is then used to calculate ...
2
votes
0answers
40 views
Which version(s) of SRP are in ISO/IEC 11770-4:2006?
I am on the impression that SRP emerges as the least uncommon and best analyzed protocol for authentication and key agreement based on a short password.
This states that SRP is part of IEC 11770-4, ...
0
votes
1answer
71 views
Does SRP reduce to DH key echange when shared password is not secret?
I can find JavaScript implementations of SRP (Secure Remote Password protocol), but nothing that inspires confidence for Diffie-Hellmen key exchange. I also have a separate need for SRP later.
I ...
4
votes
2answers
209 views
Why is SRP not widely used?
SRP seems to be a very good password authentication protocol, compared to any other things used now. So why is there no popular implementations, or even no working secure implementations?
I tried to ...
4
votes
1answer
168 views
Can SRP be used with Elliptic Curves?
I'm sure it can, because SRP (secure remote protocol) can be implemented everywhere where Diffie-Hellman works, but I need a proof to put this aspect into Wikipedia.
Edit: ok, can it be at least ...
