RFC 7804: Salted Challenge Response HTTP Authentication Mechanism

This specification describes a family of HTTP authentication mechanisms called the Salted Challenge Response Authentication Mechanism (SCRAM), which provides…

Read RFC 7804 on the RFC Editor

Outgoing relationships (18 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 7235: Hypertext Transfer Protocol (HTTP/1.1): Authentication
Normative reference — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Normative reference — RFC 7613: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords
Normative reference — RFC 7615: HTTP Authentication-Info and Proxy-Authentication-Info Response Header Fields
Normative reference — RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms
Informative reference — RFC 4086: Randomness Requirements for Security
Informative reference — RFC 2865: Remote Authentication Dial In User Service (RADIUS)
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 4510: Lightweight Directory Access Protocol (LDAP): Technical Specification Road Map
Informative reference — RFC 2898: PKCS #5: Password-Based Cryptography Specification Version 2.0
Informative reference — RFC 2945: The SRP Authentication and Key Exchange System
Informative reference — RFC 6331: Moving DIGEST-MD5 to Historic

Incoming relationships (1 related RFC)

Informatively referenced by — RFC 8322: Resource-Oriented Lightweight Information Exchange (ROLIE)