Provable Security Analysis of the Secure Remote Password Protocol

ePrint Report: Provable Security Analysis of the Secure Remote Password Protocol

Dennis Dayanikli, Anja Lehmann

This paper analyses the Secure Remote Password Protocol (SRP) in the context of provable security. SRP is an asymmetric Password-Authenticated Key Exchange (aPAKE) protocol introduced in 1998. It allows a client to establish a shared cryptographic key with a server based on a password of potentially low entropy. Although the protocol was part of several standardization efforts, and is deployed in numerous commercial applications such …

analysis client context cryptographic eprint report exchange key password protocol provable security report security security analysis