News for hackers. Stuff that matters.
Re:Hack of Cupid Media dating website exposes 42 million pla... by tptacek on Wednesday November 20, 2013 @01:19PM (#6769851)
Yes, in the same way that simply using scrypt would.

But, of course, the point isn't that SRP is a weak construction. The point is "client side stretching", whatever that was intended to mean, has nothing to do with the problem of losing a database of password "verifiers", be they plaintext, salted hashes, password hashes, or SRP v-values.

There are no comments on this comment yet.