re: [AJAX Login] Secure Without SSL

Kyle — Fri, 09 Feb 2007 04:01:11 GMT

Thanks for the tip, Marco. Looks like you guys are doing some great stuff. I'll definitely give it a closer look.

Marco Barulli — Thu, 08 Feb 2007 08:47:39 GMT

Kyle,

speaking of Ajax and cryptography, you might be interested in checking out the Javascript Crypto Library we developed at Clipperz.

It has been recently released under a BSD license and you can access the source code from here:

It presently includes:

* SRP authentication protocol

* SHA2 hash functions

* AES symmetric encryption

* Fortuna PRNG

Coming soon:

* elliptic curve cryptography

* secret sharing schemes.

Any contribution or suggestion is welcome!

Regards,

Marco