Jump to content

TLS-SRP: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
BG19bot (talk | contribs)
m Implementations: WP:CHECKWIKI error fix for #61. Punctuation goes before References. Do general fixes if a problem exists. - using AWB (8853)
Implementations: Added SecureBlackbox to the list
Line 13: Line 13:
==Implementations==
==Implementations==


TLS-SRP is implemented in [[GnuTLS]],<ref>GnuTLS Manual, [http://www.gnu.org/software/gnutls/manual/html_node/Authentication-using-SRP.html Authentication using SRP]</ref> OpenSSL [http://article.gmane.org/gmane.comp.encryption.openssl.announce/103 as of release 1.0.1], [http://www.outoforder.cc/projects/apache/mod_gnutls/ Apache mod_gnutls], [[cURL]], and [http://trevp.net/tlslite/ TLS Lite].
TLS-SRP is implemented in [[GnuTLS]],<ref>GnuTLS Manual, [http://www.gnu.org/software/gnutls/manual/html_node/Authentication-using-SRP.html Authentication using SRP]</ref> OpenSSL [http://article.gmane.org/gmane.comp.encryption.openssl.announce/103 as of release 1.0.1], [http://www.outoforder.cc/projects/apache/mod_gnutls/ Apache mod_gnutls], [[cURL]], [http://trevp.net/tlslite/ TLS Lite] and [http://www.eldos.com/sbb/ SecureBlackbox].


==Standards==
==Standards==

Revision as of 19:55, 27 April 2013

Transport layer security Secure Remote Password (TLS-SRP) ciphersuites are a set of cryptographic protocols that provide secure communication based on passwords, using an SRP password-authenticated key exchange.

There are two classes of TLS-SRP ciphersuites: The first class of cipher suites uses only SRP authentication. The second class uses SRP authentication and public key certificates together for added security.

Usually, TLS uses only public key certificates for authentication. TLS-SRP uses a value derived from a password (the SRP verifier) and a salt, shared in advance among the communicating parties, to establish a TLS connection. There are several reasons to use TLS-SRP:

  • Password authentication is less prone than certificate authentication to certain types of configuration mistakes, such as expired certificates or mismatched common name fields.
  • TLS-SRP provides mutual authentication (the client and server both authenticate each other), while TLS with server certificates only authenticates the server to the client. Client certificates can authenticate the client to the server, but it may be easier for a user to remember a password than to install a certificate.

Implementations

TLS-SRP is implemented in GnuTLS,[1] OpenSSL as of release 1.0.1, Apache mod_gnutls, cURL, TLS Lite and SecureBlackbox.

Standards

See also

References

  1. ^ GnuTLS Manual, Authentication using SRP