3 ms·
The only thing I miss in libreSSL is SRP. How would hn crowd recommend to pick alternative to SRP?
by gtt 10y ago
The only thing I miss in libreSSL is SRP. How would hn crowd recommend to pick alternative to SRP?
- zeveb 10y agoWas the issue that the OpenSSL SRP stuff was wonky, or that the LibreSSL guys hate SRP? I hope that it's the latter, because SRP is a really good protocol. As an aside, does anyone know if there's been progress with elliptic curve SRP? The last literature review I did was … shaky.
- Rafert 10y agoThey looked for maintainers[0] and later removed it when the OpenSSL SRP code was considered bad and turned out to be vulnerable as well[1] [0]: http://undeadly.org/cgi?action=article&sid=20140429062932 http://undeadly.org/cgi?action=article&sid=20140429062932 [1]: http://www.openbsd.org/papers/eurobsdcon2014-libressl.html http://www.openbsd.org/papers/eurobsdcon2014-libressl.html