What Is Secure Remote Password (SRP) Protocol and How to Use It?

Re:What Is Secure Remote Password (SRP) Protocol and How to ... by lucb1e on Sunday December 01, 2019 @11:14AM (#21676096)

> There are no browser native SRP implementations and WebCrytpo doesn't support the primitives.

This. Similarly, I looked into the web crypto API yesterday to see if I could use argon2 yet. Nope, and also not scrypt, so no memory-hard standards at all. Heck, it doesn't even do bcrypt. Not sure why I hoped for anything else, but the best thing it has to offer is PBKDF2.

Unless browsers start to support the things actually in use, I guess in-browser crypto is doomed and everything will remain server side or consist of homebrew javascript implementations.

[ Parent | on HN ]

Re:What Is Secure Remote Password (SRP) Protocol and How to ... by whoisthisfor on Sunday December 01, 2019 @02:55PM (#21677458)

https://docs.aws.amazon.com/encryption-sdk/latest/developer-...

Full Disclosure: My team built this but could be helpful. Doesn't do SRP, just encrypts data.

[ Parent | on HN ]