gnutls_srp_set_server_fake_salt_seed man page on Archlinux

Man page or keyword search:  
man Server   11224 pages
apropos Keyword Search (all sections)
Output format
Archlinux logo
[printable version]


       gnutls_srp_set_server_fake_salt_seed - API function

       #include <gnutls/gnutls.h>

       void	gnutls_srp_set_server_fake_salt_seed(gnutls_srp_server_creden‐
       tials_t cred, const gnutls_datum_t * seed, unsigned int salt_length);

       gnutls_srp_server_credentials_t cred
		   is a gnutls_srp_server_credentials_t structure

       const gnutls_datum_t * seed
		   is the seed data, only needs to be valid until the function
		   returns; size of the seed must be greater than zero

       unsigned int salt_length
		   is the length of the generated fake salts

       This  function sets the seed that is used to generate salts for invalid
       (non-existent) usernames.

       In order to prevent attackers from guessing  valid  usernames,  when  a
       user does not exist gnutls generates a salt and a verifier and proceeds
       with the protocol as usual.  The authentication will  ultimately	 fail,
       but  the	 client	 cannot tell whether the username is valid (exists) or

       If an attacker learns the seed, given a salt  (which  is	 part  of  the
       handshake)  which  was  generated when the seed was in use, it can tell
       whether or not the authentication failed because of  an	unknown	 user‐
       name.   This  seed  cannot  be used to reveal application data or pass‐

	salt_length should represent the salt length  your  application	 uses.
       Generating fake salts longer than 20 bytes is not supported.

       By  default  the	 seed  is  a  random  value,  different	 each  time  a
       gnutls_srp_server_credentials_t is allocated  and  fake	salts  are  16
       bytes long.


       Report bugs to <>.
       Home page:

       Copyright © 2001-2014 Free Software Foundation, Inc..
       Copying	and  distribution  of this file, with or without modification,
       are permitted in any medium  without  royalty  provided	the  copyright
       notice and this notice are preserved.

       The  full  documentation	 for gnutls is maintained as a Texinfo manual.
       If the /usr/share/doc/gnutls/ directory does not contain the HTML  form

gnutls				     3.gnutls_srp_set_server_fake_salt_seed(3)

List of man pages available for Archlinux

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
Vote for polarhome
Free Shell Accounts :: the biggest list on the net