Topic: Diffie-Hellman Login Code
Hello and good day,
I was wondering if the code that handles the Diffie-Hellman key exchange - mainly the backend that does the heavy-lifting - is available as an independent package anywhere? I'm developing various management suites (for things like camper registrations for a summer youth camp, scrap tracking for a manufacturer and a job tracker for a local PC tech) and was hoping that I could implement the DH key exchange into the system as an alternate to SSL when SSL is unavailable.
Currently the user gets a one-time-use login key when they request a login, and their password gets hashed along with that login key and then is transmitted to the server for verification. (Their passwords are stored as both SH1 and MD5 hashes (To avoid birthday attacks) and that hash is hashed with the login key concated.) I was looking at writing my own version of Diffie-Hellman but, as you probably experienced when implementing it into Enano, it's quite a big bear to tackle.
If you could point me in the right direction that'd be great. Otherwise I'll resort to downloading and installing Enano and then pulling the code out of it the "fun" way. :-)
Thanks for your time,