Secure Remote Password Protocol (SRPP) , . SRP , . , Encrypted key exchange, .
SRP , , , , . :
, ,
- .
, , , - , .
SRP , . , 6 . , 6a.
, . , , SRP , SSH, , Deffie-Hellman, . SRP 3 RFC 2945. SRP 6 SSL/TLS , EAP SAML, IEEE P1363 ISO/IEC 11770-4.
, :
q N = 2 q + 1 , N q . N , N .
N ( ).
g
k , , , k = H (N, g) 6 ( 6 k 3).
s
I (username).
p , I.
H () -, , SHA-256
x , x = H (s, p).
v , v = g x.
u .
a, b
, : , , , , ; , , , . , , . , , , (verifier-based).
|
|
A, B (. ). , :
x = H (s, p) (s )
v = g x ( )
(I, s, v) . :
1. -> : I, A = g a (, a )
2. -> : s, B = kv + g b ( s, b)
: u = H (A, B) :
1. x = H (s, p) ( )
2. S = (B kg x)(a + ux) ( )
3. K = H (S) (K )
:
1. S = (Av u)b ( )
2. K = H (S) (K )
K. , , . :
-> : M = H (H (N) xor H (g), H (I), s, A, B, K)
-> : H (A, M, K)