Why does SRP-6a use k = H(N, g) instead of the k = 3 in SRP-6?
If k is a constant, such as 3, it becomes possible to select a pair (N,g) such that the discrete log of k to the base g is known, which would enable the two-for-one guessing attack again.