Tagged Questions
0
votes
3answers
285 views
Are there flaws in this simple key exchange?
I'm reviewing for a computer security exam. Here is a simple scenario:
Suppose that someone suggests the following way to confirm that the two of you are both in possession of the same secret key. ...
4
votes
2answers
132 views
What steps can you take to make offline cracking of SRP harder?
In the aftermath of the Blizzard hack, what steps can I take to make offline cracking of SRP more difficult?
My question assumes that your database is already gone and that you implemented SRP more ...
3
votes
3answers
173 views
Does the hash change the security of the Secure Remote Password protocol?
I'm implementing the Secure Remote Password protocol, and similar to this question, I'm wondering if I can use the SHA-512 hash function instead of SHA-1 currently being used. Would this help improve ...
6
votes
2answers
360 views
Implementing Secure Remote Password: Constructing the verifier
The SRP protocol as described in RFC 2945 generates the password verifier:
x = SHA(<salt> | SHA(<username> | ":" | <raw password>))`
v = g^x % N
I have three questions: why use ...
