Stack Overflow
Stack Overflow

Questions tagged [srp-protocol]

The Secure Remote Password protocol (SRP) is a password-authenticated key agreement protocol in order to establish an encrypted channel based on a password.

37 questions
0
votes
1 answer

Is there any error with local moto server and cognito-idp in boto3 with awssrp?

I have a local moto server and am verifying cognito-idp in boto3 with awssrp, but I get an error. The error message is. Traceback (most recent call last): File "/tests/get_token.py", line 71, in token_res =…
souzou johnny
  • 1
  • 2
0
votes
1 answer

Why does Amplify for AWS Cognito send new passwords in plain text when SRP is enabled?

We are using Amplify with AWS Cognito, using SRP. From our understanding of SRP, passwords should not be sent in plain text over the network. When the user is required to change their password on login, we use the Auth.completeNewPassword method.…
cbp
  • 25,252
  • 29
  • 125
  • 205
0
votes
0 answers

How can I send a secret to a server, and validate it, without risking bruteforcing of the hash?

I want to send a secret to a server, say the domain the current browser is visiting, but I don't want the server to know what the website address is, only if the server has a matching record for this specific domain. I was thinking of simply hashing…
FooBar
  • 5,752
  • 10
  • 44
  • 93
0
votes
0 answers

How to build SRP for Win32 with Visual Studio 2017?

I need to build Secure Remote Password protocol library (SRP/libsrp) for old project from 2010. I can't figure out how to build it for Win32. I found this link with latest source code: http://srp.stanford.edu/download.html Version 2.1.2 was used in…
Yaroslav
  • 1
  • 3
0
votes
0 answers

secure remote password SRP_set_authenticator()

I am using secure remote password protocol in an embedded device that doesn't have a display to display username/pawword nor a keyboard to enter them. I have been told I can use SRP_set_authenticator() instead of SRP_set_params() which requires that…
user900909
  • 21
  • 5
0
votes
2 answers

C# BigIntegers get the positive modPow

I'm trying to implement the SRP Protocol for secure authentication. My problem is that when I have to calculate a ModPow of a negative number, it also returns a negative number. I know it's maybe called the remainder not the modulus but I really…
stomseven
  • 157
  • 1
  • 2
  • 8
0
votes
2 answers

Is it possible to modify server reply on transit

I am building a javascript library that will allow authentication to server using SRP-6 protocol. I know using javascript as an authentication method is not the best option due to XSS. But proper XSS prevention can eliminate most issues. My only…
Richard Heath
  • 349
  • 3
  • 12
1 2
3