Comment on A secure way to store website users "offsite" but still own them.parentComments−bobds15yI've collected a few links related to JS cryptography, might be useful: http://disattention.com/13/javascript-cryptography/There is another SRP implementation in JS+PHP: http://www.denksoft.com/wordpress/web-development/secure-aja...We definitely need more SRP implementations, glad to see more people working on it.−tptacek15yClipperz also has a PHP SRP implementation, but it accepts any A = 0 mod N and thus allows people to log in without knowing their passwords, which is a nice feature but maybe not what you want in a secure auth scheme.
Comments
I've collected a few links related to JS cryptography, might be useful: http://disattention.com/13/javascript-cryptography/
There is another SRP implementation in JS+PHP: http://www.denksoft.com/wordpress/web-development/secure-aja...
We definitely need more SRP implementations, glad to see more people working on it.
Clipperz also has a PHP SRP implementation, but it accepts any A = 0 mod N and thus allows people to log in without knowing their passwords, which is a nice feature but maybe not what you want in a secure auth scheme.