Is sending a password all you need SSL for?
In that case it would probably be secure enough to double hash a password with unique salt, unless you have especially strict security needs. Something like (pseudo):
Edit: Oh, and choose a good hashFunction, of course. :)
In that case it would probably be secure enough to double hash a password with unique salt, unless you have especially strict security needs. Something like (pseudo):
salt = getRandomSalt() hash = hashFunction(client.password) hash = hashFunction(hash + salt) sendHash() If hash = getHash() Then ok() Else wrong()
Edit: Oh, and choose a good hashFunction, of course. :)