Comment by xondono

The point is that you are not achieving much.

You need both parties to know the nonce and the salt for this to work, so you’ll need to send it over. At this point what value are you gaining over just sending the password?