Hot answers tagged srp
I know PBKDF2 is essentially "useless" against anyone with a GPU rig and I have read that bcrypt is "useless" to anyone with an FPGA setup. Neither is useless. Newer alternatives like scrypt and the eventual PHC winner make better use of the defenders' resources, but even a thousand iterations of PBKDF2 is useful, compared to doing nothing. If you ...
According to the Stanford page mutual authentication can be provided if both sides keep their secrets secret. Thanks mikeazo.
Only top voted, non community-wiki answers of a minimum length are eligible