Secure Remote Password

• Authentication of Alice - Only a person with correct knowledge of W can compute g^b(uW)modp. A hacker cannot compute W from g^Wmodp due to DLP
• Authentication of Bob - Only a person with correct knowledge of W can compute the same
• Security against Dictionary Attacks - Have to try all possible passwords to get W (DLP)
• Security against Server Compromise - Even if the hacker hold of g^Wmodp, due to DLP, he cannot retrieve W.