pow or xor?

[ghroth]

User -> Host:  I, A = g^a                  (identifies self, a = random number)
Host -> User:  s, B = kv + g^b             (sends salt, b = random number)

       Both:  u = H(A, B)

       User:  x = H(s, p)                 (user enters password)
       User:  S = (B - kg^x) ^ (a + ux)   (computes session key)
       User:  K = H(S)

       Host:  S = (Av^u) ^ b              (computes session key)
       Host:  K = H(S)

A simple question.. in these formulas, ^ means xor or exponentiation?

[Patman128]

It means XOR.

[ghroth]

All of them? Or just user's S?

ps. it's the srp structure

[faramir118]

If you're reading http://srp.stanford.edu/design.html, scroll up and read the key

[ghroth]

If you're reading http://srp.stanford.edu/design.html, scroll up and read the key

Yeah, got it.. i must be blind. Thank you!

[ghroth]

...Another noobish question. To hash "username:password", requires username to be in uppercase.. what about password?

[Patman128]

...Another noobish question. To hash "username:password", requires username to be in uppercase.. what about password?

Yes, they must both be in uppercase.