My question: Anyone knows how to implement
Diffie-Hellman authentication in PHP (or if this has already been done)?
- I'm using CodeIgniter with TankAuth (both latest version)
- I'm forcing SSL access via .htaccess
One of the requirements of this project is to use challenge-based authentication, I read a lot about it, it seems that making
Diffie-Hellman work with TankAuth (along with SSL) is a secure authentication solution (provided it's properly done!)
The only real problem is: I just couldn't translate the SRP specification into PHP/mysql (I thought I was good at math but obviously I'm not!)
It doesn't matter if it's plain php, I can adapt the code to make it work with CodeIgniter/TankAuth.
I googled a lot, the closest I could find is this, but the implementation just doesn't feel right.
I also understand I'll eventually have to adapt this to make the two-steps authentication process look like a normal one-step standard login form (using ajax), but that's for later, right now I'm stuck with the logic.