4.3.2 SRP authentication