RFC 9383: SPAKE2+, an Augmented Password-Authenticated Key Exchange (PAKE) Protocol

This document describes SPAKE2+, a Password-Authenticated Key Exchange (PAKE) protocol run between two parties for deriving a strong shared key with no risk…

Read RFC 9383 on the RFC Editor

Outgoing relationships (12 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Normative reference — RFC 8032: Edwards-Curve Digital Signature Algorithm (EdDSA)
Normative reference — RFC 5480: Elliptic Curve Cryptography Subject Public Key Information
Normative reference — RFC 4493: The AES-CMAC Algorithm
Normative reference — RFC 8265: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords
Informative reference — RFC 7914: The scrypt Password-Based Key Derivation Function
Informative reference — RFC 9106: Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications
Informative reference — RFC 8844: Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)