RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms

The secure authentication mechanism most widely deployed and used by Internet application protocols is the transmission of clear-text passwords over a channel…

Read RFC 5802 on the RFC Editor

Outgoing relationships (28 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 3454: Preparation of Internationalized Strings ("stringprep")
Normative reference — RFC 4422: Simple Authentication and Security Layer (SASL)
Normative reference — RFC 2743: Generic Security Service Application Program Interface Version 2, Update 1
Normative reference — RFC 3174: US Secure Hash Algorithm 1 (SHA1)
Normative reference — RFC 4013: SASLprep: Stringprep Profile for User Names and Passwords
Normative reference — RFC 5056: On the Use of Channel Bindings to Secure Channels
Normative reference — RFC 3961: Encryption and Checksum Specifications for Kerberos 5
Normative reference — RFC 4121: The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2
Normative reference — RFC 5929: Channel Bindings for TLS
Normative reference — RFC 5801: Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family
Normative reference — RFC 3962: Advanced Encryption Standard (AES) Encryption for Kerberos 5
Normative reference — RFC 4401: A Pseudo-Random Function (PRF) API Extension for the Generic Security Service Application Program Interface (GSS-API)
Normative reference — RFC 4402: A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism
Informative reference — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 4086: Randomness Requirements for Security
Informative reference — RFC 2865: Remote Authentication Dial In User Service (RADIUS)
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 4510: Lightweight Directory Access Protocol (LDAP): Technical Specification Road Map
Informative reference — RFC 2898: PKCS #5: Password-Based Cryptography Specification Version 2.0
Informative reference — RFC 4616: The PLAIN Simple Authentication and Security Layer (SASL) Mechanism
Informative reference — RFC 2945: The SRP Authentication and Key Exchange System
Informative reference — RFC 5803: Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted Challenge Response Authentication Mechanism (SCRAM) Secrets

Incoming relationships (10 related RFCs)

Updated by, Normatively referenced by — RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms
Updated by, Normatively referenced by — RFC 9266: Channel Bindings for TLS 1.3
Normatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Normatively referenced by — RFC 5804: A Protocol for Remotely Managing Sieve Scripts
Normatively referenced by — RFC 7804: Salted Challenge Response HTTP Authentication Mechanism
Informatively referenced by — RFC 5801: Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family
Informatively referenced by — RFC 7613: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords
Informatively referenced by — RFC 8265: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords
Informatively referenced by — RFC 6885: Stringprep Revision and Problem Statement for the Preparation and Comparison of Internationalized Strings (PRECIS)
Informatively referenced by — RFC 6331: Moving DIGEST-MD5 to Historic