Bug 53341

Summary:	OpenSSH 'SRP' keyword request
Product:	Gentoo Linux	Reporter:	Edward Flick <eddy>
Component:	[OLD] Server	Assignee:	Daniel Ahlberg (RETIRED) <aliz>
Status:	RESOLVED CANTFIX
Severity:	enhancement
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Edward Flick 2004-06-08 12:55:31 UTC

I was just wondering if you guys planned on providing an 'srp' keyword to enable the srp patch for openssh.  SRP (http://srp.stanford.edu) is a secure method of user/pass authentication which is not susceptible to man in the middle attacks.  Does not pass the password over the line.  And provides both parties a secret key, which can be used for symmetric encryption, as a byproduct of successfull authentication.  It essentially is just a method for the client and server to prove to each other that they have the password.

Reproducible: Always
Steps to Reproduce:

Comment 1 Daniel Ahlberg (RETIRED) gentoo-dev

2004-09-29 07:36:44 UTC

The only SRP patch for openssh I could find is over two years old, If there is an updated patch available please provide a link and reopen this bug.