News for hackers. Stuff that matters.

A comment on CBCrypt: Encrypt from the client rather than send passwords to servers. Parent comment

Re:CBCrypt: Encrypt from the client rather than send passwor... by ybx on Tuesday October 06, 2015 @11:58AM (#10339796)
Yeah, there are plenty of authentication systems out there for this kind of thing, and preferably something like SRP would be used.
[ Parent | on HN ]
Re:CBCrypt: Encrypt from the client rather than send passwor... by cvwright on Tuesday October 06, 2015 @12:45PM (#10340198)
And before SRP there was EKE. I thought the main reason it never saw wider use was because it was patented. Although according to Wikipedia, those patents expired in 2011 and 2013.
[ Parent | on HN ]