TLS-SRP

Transport Layer Security Secure Remote Password (TLS-SRP) ciphersuites are a set of cryptographic protocols that provide secure communication based on passwords, using an SRP password-authenticated key exchange.

The second class uses SRP authentication and public key certificates together for added security.

Usually, TLS uses only public key certificates for authentication.

TLS-SRP uses a value derived from a password (the SRP verifier) and a salt, shared in advance among the communicating parties, to establish a TLS connection.

There are several possible reasons one may choose to use TLS-SRP: TLS-SRP is implemented in GnuTLS,[1] OpenSSL as of release 1.0.1,[2] Apache mod_gnutls[3] and mod_ssl, cURL, TLS Lite[4] SecureBlackbox[5] and wolfSSL.