Hacker News new | ask | show | jobs
by lucb1e 2396 days ago
> There are no browser native SRP implementations and WebCrytpo doesn't support the primitives.

This. Similarly, I looked into the web crypto API yesterday to see if I could use argon2 yet. Nope, and also not scrypt, so no memory-hard standards at all. Heck, it doesn't even do bcrypt. Not sure why I hoped for anything else, but the best thing it has to offer is PBKDF2.

Unless browsers start to support the things actually in use, I guess in-browser crypto is doomed and everything will remain server side or consist of homebrew javascript implementations.

1 comments

https://docs.aws.amazon.com/encryption-sdk/latest/developer-...

Full Disclosure: My team built this but could be helpful. Doesn't do SRP, just encrypts data.