3 ms·
SRP is an "Augmented PAKE" which does not require the server to ever see the plaintext password. I'm not aware of any others that are claimed to be patent-free.
by lann 10y ago
SRP is an "Augmented PAKE" which does not require the server to ever see the plaintext password. I'm not aware of any others that are claimed to be patent-free.
- cm3 10y agoAvoiding patents of other protocols seems to have been one of the goals, but then Thomas has patented SRP itself. https://www.google.com/patents/US6539479 https://www.google.com/patents/US6539479 which is set to expire in two years minus 15 days (Jul 14, 1998).
- colejohnson66 10y agoWouldn't that be 2 years and /a month/ minus 15 days? :)
- cm3 10y agoYou're right.
- cm3 10y ago2 or maybe 4 years would be reasonable to earn back (some or all of) the investment, and allow others to improve upon and maybe even patent the new invention. As it stands, whole industries are held back due to 20 years for patents.
- lann 10y agoAh right. It is patented, but the most common application of SRP can be used for free.