From: "andrew cooke" <andrew@...>
Date: Fri, 5 Sep 2008 07:33:12 -0400 (CLT)
SRP is a protocol for securely verifying passwords without needing encryption (it uses hashes and temporary secrets). There's an implementation at http://srp.stanford.edu/ Documentation - http://srp.stanford.edu/doc.html White paper - http://srp.stanford.edu/ndss.html Download - http://srp.stanford.edu/download.html It doesn't seem to say anywhere, but the download appears to be a C library. It also contains some Java code that appears to implement a Telnet client with SRP support. Related, there's a pure Python library for TLS available here - http://trevp.net/ http://trevp.net/tlslite/ - along with extensions to use SRP within TLS - http://trevp.net/tls_srp/ Andrew