{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Implements the Secure Remote Password (SRP) protocol for password-based mutual authentication over insecure networks without relying on external certificate infrastructure.","skillfed_tags":["authentication","cryptography"],"use_cases":["Authenticate users in a custom application without setting up a certificate authority or external key server","Implement mutual authentication between a client and server over an untrusted network connection","Derive a shared encryption key from a password for symmetric-key encryption of subsequent communication","Build authentication systems for embedded or isolated environments where certificate infrastructure is impractical"],"what_it_does":"SRP is a cryptographic authentication protocol that allows a client and server to verify each other's knowledge of a password without transmitting the password itself or relying on a trusted certificate authority. Unlike SSL/TLS or Kerberos, SRP derives server-side verification keys directly from user passwords, making it useful for systems where external infrastructure is unavailable or undesirable. The protocol provides mutual authentication\u2014both sides must possess the correct password or key material for authentication to succeed\u2014and produces a shared cryptographic key that can be used for subsequent symmetric encryption.\n\nThe srp package provides a Python implementation of this protocol. It depends only on six, making it lightweight and easy to integrate. The package is marked Production/Stable and has been in active development since 2011, though recent maintenance is minimal. It is suitable for applications that need password-based authentication without certificate management overhead, though you should verify that SRP meets your security and compatibility requirements before deploying it.","worth_installing":"Yes, if you need SRP-based authentication and have verified that SRP meets your security requirements. The package is stable, has no known vulnerabilities, and installs easily with minimal dependencies. However, dormant maintenance (no releases in 651 days) means security updates or bug fixes may be slow; evaluate whether the protocol itself and this implementation align with your threat model before adopting it."},"id":"srp","links":{"html":"https://skillfed.io/packages/srp","md":"https://skillfed.io/packages/srp.md","pypi":"https://pypi.org/project/srp/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2024-11-01","license_spdx":null,"license_treatment":"permissive","name":"srp","python_support":"unspecified","summary":"Secure Remote Password"},"popularity":{"monthly_downloads":109575,"position":12509,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.22"}