28 ms·
It's interesting that no one's pointed out that SRP is trivially breakable by having the client send zero as its "A" value. Of course, you can guard against th
by sillysaurus2 13y ago
It's interesting that no one's pointed out that SRP is trivially breakable by having the client send zero as its "A" value.
Of course, you can guard against that particular case. But the point is that SRP has pitfalls, just like every other solution. And those pitfalls aren't well known; the Wikipedia pseudocode makes no mention of that exploit, for example.
- Jtsummers 13y agoYes it does [1]. In the narrative example with Steve and Carol, it states 3 safeguards. 1. Carol will abort if she receives B == 0 (mod N) or u == 0. 2. Steve will abort if he receives A (mod N) == 0. 3. Carol must show her proof of K first. If Steve detects that Carol's proof is incorrect, he must abort without showing his own proof of K. [1] Ok, the python code doesn't seem to, you're correct. However, that's less a demonstration of a protocol implementation, and more a demonstration of the protocol's math. The page does mention it though in the protocol section. It would be appropriate (and maybe later I'll do this) to break that out so it's more obvious.
- benjamincburns 13y ago"Up next on VH1's Where Are They Now?, Alice and Bob!" Alice: At the time I thought Eve was the only one I had to worry about. Little did I know, Carol would be the one who'd really replace me in the end. Edit: Hmm, downvoted. I guess humor isn't welcome here?
- greyboy 13y agoUnfortunately, no.
- benjamincburns 13y agoA bit of transparency: Before the edit I received one downvote. After I received 5 upvotes, which is on the higher end of most of my comments. Either I reacted prematurely, or calling it out reversed the perception bias to the positive. I think it's some of both, as the joke really wasn't funny enough to warrant the score.