PuTTY wish srp-auth

This is a mirror. Follow this link to find the primary PuTTY web site.

summary: SRP authentication (in SSH and perhaps also Telnet)
class: wish: This is a request for an enhancement.
difficulty: tricky: Needs many tuits.
priority: medium: This should be fixed one day.

SRP support in SSH, as an alternative to pure password authentication. Possibly also in Telnet.

This would be really useful in SSH, because it removes a lot of the danger of accepting a host key you're uncertain about. The SRP exchange convinces each side that the other side knows the same password, without requiring either side to give the password away to the other - so if you use SRP authentication, you can safely type your password in even if you don't know the remote host key is correct. Moreover, the current drafts of SRP authentication in SSH then use the SRP shared secret to authenticate the SSH host key - so that even if you aren't sure the host key belongs to the host you think it does, you can at least be sure that it does belong to a machine which knows your password. This would be a massive improvement in the SSH host key model.

Resources:

Stanford SRP page and RFC 2945
draft-nisse-secsh-srp-01 (expired) describing how LSH implements SRP (as a key exchange method)
draft-tomh-secsh-srp-00 (expired) describes how Tom Holroyd's OpenSSH patch implements SRP (as a userauth method)
A statement on the IPR issues around SRP
The IETF SECSH mail archive has discussions of the above drafts.
RFC 2944 describes Telnet SRP authentication.

If you want to comment on this web site, see the Feedback page.

Audit trail for this wish.

(last revision of this bug record was at 2022-09-11 23:46:37 +0100)