The Secure Remote Password protocol (SRP) is an augmented password-authenticated key exchange (PAKE) protocol.
N
— A large safe prime;
g
— A generator modulo N;
k
— Multiplier parameter;
s
— The user salt;
v
— Password Verifier;
x
— Private key (The hash of salt + password);
a
— Client secret key;
b
— Server secret key;
A
— Client public key;
B
— Server public key;
u
— The value of preventing attacker who learns a user's verifier;
S
— Pre-master secret (The secure common session key);
K
— The session key hash for used to generate M;
M
— Evidence message, To verify both sides generated the same session key;
- TypeScript
- Web Crypto API
- BigInt (Ch67, Sf14, FF68, Op54)
- bigint-mod-arith
- CSS nesting (Ch120, Sf17.2, FF117, Op106)
- SolidJS
- Vite