password
into the red
client password field, press TAB, and watch the status field at the bottom
change to indicate successful authentication.
Fields in bold are primary user-input fields.
The username defaults to user
and the
server's password defaults to password
.
If the client's password is the same as the server's
password, then the protocol ensures that the client
and server sessions keys (S) match up, regardless
of the values of the other inputs.
Fields in italics are dependent fields. Their values are calculated from other fields, so it is not recommended that they be changed manually. Doing so may make the values calculated by the demo inconsistent.
Fields in plain text are "automatic" input fields. In some cases, like the N and g parameters, these fields are normally picked from a predefined set of values. In other cases, the values of the fields are generated randomly. Although it is possible to enter values manually into these fields, the values may be overwritten by other controls on the page.
The "radix" radio button controls the base used to display numeric values. Changing this setting does not alter the actual values of any fields.
The SRP variant radio button selects the protocol in use. This affects the value of k, as well as the formula used to compute u.
java.math.BigInteger
class to do
large number arithmetic.
Some browsers (e.g. Netscape, Mozilla) allow JavaScript code to
create Java objects directly through JavaScript, while others
(e.g. Internet Explorer) require the assistance of a small "helper"
Java applet to construct BigInteger
objects.
This requires that your browser support LiveConnect,
a feature that allows applets to be called and controlled directly
from JavaScript.
The SRP JavaScript demo has been tested successfully under the following browser environments:
To aid in testing, use the following LiveConnect test. This test instantiates an applet and attempts to access it using JavaScript.
If the test succeeds, you will see an alert box with the message "LiveConnect test succeeded". Any other response indicates a failure. A successful result means that it is likely your browser will work with the demo as-is, or can be made to work.