srp-rb

KO | EN

gitlite — search

#python #hacktoberfest #react #ai #llm #golang #android #linux #windows #awesome #kubernetes #vue #pytorch #mcp

(★ 32)

Secure Remote Password protocol SRP-6a.

srp-rb 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

This is a pure Ruby implementation of the Secure Remote Password protocol (SRP-6a).

SRP is an authentication method that allows the use of user names and passwords over an insecure network connection without revealing the password. If the client side lacks the user's password or the server side lacks the proper verification key, the authentication will fail.

Unlike other common challenge-response autentication protocols, such as Kerberos and SSL, SRP does not rely on an external infrastructure of trusted key servers or certificate management.

References

*	[http://srp.stanford.edu/](http://srp.stanford.edu/)
*	[http://srp.stanford.edu/demo/demo.html](http://srp.stanford.edu/demo/demo.html)

Usage example
=============

username = "user"
	password = "password"

require 'srp'
	prime_length = 1024

# The salt and verifier should be stored on the server database.

@auth = SRP::Verifier.new(prime_length).generate_userauth(username, password)
		# @auth is a hash containing :username, :verifier and :salt

# ~~~ Begin Authentication ~~~

client = SRP::Client.new(prime_length)
		A = client.start_authentication()

# Client => Server: username, A

# Server retrieves user's verifier and salt from the database.
		v = @auth[:verifier]
		salt = @auth[:salt]

# Server generates challenge for the client.
		verifier = SRP::Verifier.new(prime_length)
		session = srp.get_challenge_and_proof(username, v, salt, A)

# Server sends the challenge containing salt and B to client.
		response = session[:challenge]

# Server has to persist proof to authenticate the client response.
		@proof = session[:proof]

# Server => Client: salt, B

# Client calculates M as a response to the challenge.
		client_M = client.process_challenge(username, password, salt, B)

# Client => Server: username, M

# New verifier may be instantiated on the server.
		verifier = SRP::Verifier.new(prime_length)

# Verify challenge response M.
		# The Verifier state is passed in @proof.
		server_H_AMK = verifier.verify_session(@proof, client_M)
		# Is false if authentication failed.

# At this point, the client and server should have a common session key
		# that is secure (i.e. not known to an outside party).  To finish
		# authentication, they must prove to each other that their keys are
		# identical.

# Server => Client: H(AMK)

client.verify(server_H_AMK) == true

srp-rb

srp-rb 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

srp-rb

srp-rb 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README