Reputation
448
Next privilege 500 Rep.
Access review queues
Badges
3 11
Impact
~5k people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Apr
28
awarded  Notable Question
Mar
23
awarded  Yearling
Dec
7
awarded  Curious
Nov
5
accepted Weakness of SRP after server compromise
Oct
12
revised Weakness of SRP after server compromise
added 472 characters in body
Oct
12
answered Weakness of SRP after server compromise
Oct
11
awarded  Commentator
Oct
11
comment Weaknesses of RFC6628
I'm pretty sure we're all in agreement, that the password verifier in augmented pake does not offer sufficient protection against brute force of low entropy secrets, and the correct behavior is to apply rate-limiter at the client before sending expensive hash to server. But the question asks how much work per guess. So if you want to rephrase your answer, I'll give you credit.
Oct
11
comment Weaknesses of RFC6628
RFC6628 is not SRP. They specifically mention SRP, and say they're better than SRP, and say they're designed to be resistant to server compromise, and describe it in section "3.5. Resistance to Server Compromise"
Oct
11
revised Weakness of SRP after server compromise
make question more clear
Oct
11
revised Weaknesses of RFC6628
make the question more clear
Oct
11
comment Weakness of SRP after server compromise
The RFC specifically says SHA means SHA1, 160 bit.
Oct
11
asked Weakness of SRP after server compromise
Oct
11
asked Weaknesses of RFC6628
Mar
23
awarded  Yearling
Nov
20
accepted Availability of a simple limited PRNG algorithm
Nov
20
comment Availability of a simple limited PRNG algorithm
Thanks - They are talking about HMAC-DRBG, KHF-DRBG, and Hash-DRBG, which are defined in section 10 of 800-90A. This, I can definitely work with. Thanks.
Nov
19
revised Availability of a simple limited PRNG algorithm
added 185 characters in body
Nov
19
revised Availability of a simple limited PRNG algorithm
deleted 3192 characters in body
Nov
19
comment Availability of a simple limited PRNG algorithm
@RickyDemer This comment is actually extremely helpful, because it's all defined in section 10 of 800-90A. This, I can definitely work with. Thanks. If you want to post this as an answer, I think you deserve the credit.