4 ms·

This sounds like ephemeral diffie hellman. Is that still protected by patents? I wouldn't think so seeing we've had robust implementations in openssl for a long

This sounds like ephemeral diffie hellman. Is that still protected by patents? I wouldn't think so seeing we've had robust implementations in openssl for a long time now.

tptacek 10y ago
It's not ephemeral Diffie-Hellman.
- DorothySim 10y ago
  According to this [0] they are related ("SRP is related to Diffie-Hellman."). [0]: http://web.archive.org/web/20130407190430/http://chargen.matasano.com/chargen/2007/9/7/enough-with-the-rainbow-tables-what-you-need-to-know-about-s.html http://web.archive.org/web/20130407190430/http://chargen.mat...
  - tptacek 10y ago
    They're related in that the derivation of session secrets is done through a simple modular exponentiation. Pretty much nothing else, from the generation of keypairs to the selection of groups to work in to the way parameters have to be checked, are the same.
dfc 10y ago
> The Secure Remote Password protocol (SRP) is an augmented password-authenticated key agreement (PAKE) protocol, specifically designed to work around existing patents.[1]