http://srp.stanford.edu/srp/

                         The Stanford SRP Authentication Project

The networked password problem has been solved. Simple challenge-response authentication is dead. 

SRP stands for the Secure Remote Password protocol, and it represents a new mechanism for performing 
secure password-based authentication and key exchange over any type of network. SRP offers both 
security and convenience improvements over authentication techniques currently in use. 

The SRP project is developing secure Internet software for free worldwide use. Starting with a 
fully-secure Telnet and FTP distribution, we hope to supplant weak networked authentication systems 
with strong replacements that do not sacrifice user-friendliness for security. Security should be 
the default, not an option!