SRP PHP Client

PHP Client for Login over Secure Remote Password Protocol

1. registrate

generate s (salt) and v (verifier). generated by client, stored by server

$username = "falk";
$password = "test123";
$s = $srp->getRandomSeed();
$x = $srp->generateX($s, $username, $password);
$v = $srp->generateV($x);
$send = array("phase" => 0, "I" => $username, "v" => $v, "s" => $s);

Send

Array ( [phase] => 0 [I] => falk [v] => afff7348f34455624497b6d4f975dedc478a50ae165a1b8251edb61d9da0d78f6d699d0d54f5f1d6d94d048e6cebc150f0daed266b60359148a5d8d038d7b0f3 [s] => 3f153fb9376fc305f31782252a697b45f52ded870fa2ac718e6901c76ee56df243506ac715af00a7a2b5d391286c0b41c031217354b0e771c513c8938756c0a2 )

Recive

Array ( [success] => 1 )

2. Login - Phase 1

client generate a (private random key), A (public generated key) and send A, I (username) to server.

$a = $srp->getRandomSeed();
$A = $srp->generateA($a);
$send = array("phase" => 1, "I" => $username, "A" => $A);

Send

Array ( [phase] => 1 [I] => falk [A] => 82a187fea0ba88c178524bfa683ab4755242799803f332ebd42fefe95d3a319d4f53b08eccab193e6ae970fd2debf5ad588b11ce029bea96d1419e375d6a2961 )

Recive

Array ( [success] => )

3. Login - Phase 2

Client receive s (salt) und B (public key of Server) in Phase 1. Client build M1 and send it sto Server.


Warning: Undefined array key "B" in /html/code.falk-m.de/srp/client.php on line 128

Warning: Undefined array key "s" in /html/code.falk-m.de/srp/client.php on line 129

Deprecated: strtolower(): Passing null to parameter #1 ($string) of type string is deprecated in /html/code.falk-m.de/srp/php/lib/srp.php on line 222

Deprecated: strtolower(): Passing null to parameter #1 ($string) of type string is deprecated in /html/code.falk-m.de/srp/php/lib/srp.php on line 222

Warning: Uninitialized string offset -9223372036854775808 in /html/code.falk-m.de/srp/php/lib/srp.php on line 209
$B = $res1["B"];
$s = $res1["s"];
$x = $srp->generateX($s, $username, $password);
$S = $srp->generateS_Client($A, $B, $a, $x);
$M1 = $srp->generateM1($A, $B, $S);
$send = array("phase" => 2, "M1" => $M1);

Send

Array ( [phase] => 2 [M1] => d79a78cb69a489a6322ffd37437d72c2533254536db325039c9f71ca4f0bc591 )

Recive

4. Server verification

Client receive M2 from Server, rebiuld and compare them and build session key

$res2 = json_decode($res["body"], true);
$M2 = $res2["M2"];
$M2_check = $srp->generateM2($A, $M1, $S);

if($M2 == $M2_check){
echo "SUCCESS;";
$K = $srp->generateK($S);
echo "SESSION KEY: ".$K;
}

Output


Warning: Trying to access array offset on null in /html/code.falk-m.de/srp/client.php on line 180