Matches in DBpedia 2016-04 for { ?s ?p "The Secure Remote Password protocol (SRP) is an augmented password-authenticated key agreement (PAKE) protocol, specifically designed to work around existing patents.Like all PAKE protocols, an eavesdropper or man in the middle cannot obtain enough information to be able to brute force guess a password without further interactions with the parties for each guess. This means that strong security can be obtained using weak passwords. Furthermore, being an augmented PAKE protocol, the server does not store password-equivalent data. This means that an attacker who steals the server data cannot masquerade as the client unless they first perform a brute force search for the password.In layman's terms, given two parties who both know a password, SRP (or any other PAKE protocol) is a way for one party (the \"client\" or \"user\") to demonstrate to another party (the \"server\") that they know the password, without sending the password itself, nor any other information from which the password can be broken, short of a brute force search."@en }
Showing triples 1 to 1 of
1
with 100 triples per page.
- Secure_Remote_Password_protocol abstract "The Secure Remote Password protocol (SRP) is an augmented password-authenticated key agreement (PAKE) protocol, specifically designed to work around existing patents.Like all PAKE protocols, an eavesdropper or man in the middle cannot obtain enough information to be able to brute force guess a password without further interactions with the parties for each guess. This means that strong security can be obtained using weak passwords. Furthermore, being an augmented PAKE protocol, the server does not store password-equivalent data. This means that an attacker who steals the server data cannot masquerade as the client unless they first perform a brute force search for the password.In layman's terms, given two parties who both know a password, SRP (or any other PAKE protocol) is a way for one party (the \"client\" or \"user\") to demonstrate to another party (the \"server\") that they know the password, without sending the password itself, nor any other information from which the password can be broken, short of a brute force search.".