News for hackers. Stuff that matters.

A comment on Essential security for Linux servers (2013). Parent comment

Re:Essential security for Linux servers (2013) by dsr_ on Wednesday December 08, 2021 @08:41AM (#29484549)
You two are working your ways towards defining a zero-knowledge password proof:

https://en.wikipedia.org/wiki/Zero-knowledge_password_proof

I think SRP is the most widely implemented version. https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...

[ Parent | on HN ]
Re:Essential security for Linux servers (2013) by throw0101a on Wednesday December 08, 2021 @10:17AM (#29485733)
Note that SRP is an older protocol, and things have moved on from there. See various PAKE algorithms:

* https://en.wikipedia.org/wiki/Password-authenticated_key_agr...

[ Parent | on HN ]