[gnutls-devel] [PATCH] srp: Add resistance against guessing usernames

[Nikos Mavrogiannopoulos]

On Thu, Feb 20, 2014 at 6:28 AM, Attila Molnar <attilamolnar at hush.com> wrote:
> From aa892147f5da4868613a6accf2a5f93a484b4d20 Mon Sep 17 00:00:00 2001
> From: Attila Molnar <attilamolnar at hush.com>
> Date: Mon, 17 Feb 2014 14:10:22 +0100
> Subject: [PATCH] srp: Add resistance against guessing usernames
> When a client tries to authenticate using an unknown username, instead of
> generating a random salt every time, generate the salt based on the
> username and a secret seed.

Thank you, applied!