RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms

This document registers the Simple Authentication and Security Layer (SASL) mechanisms SCRAM-SHA-256 and SCRAM-SHA-256-PLUS, provides guidance for secure…

Read RFC 7677 on the RFC Editor

Outgoing relationships (9 related RFCs)

Updates, Normative reference — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 4422: Simple Authentication and Security Layer (SASL)
Normative reference — RFC 7627: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Informative reference — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms
Informative reference — RFC 4270: Attacks on Cryptographic Hashes in Internet Protocols

Incoming relationships (3 related RFCs)

Updated by, Normatively referenced by — RFC 9266: Channel Bindings for TLS 1.3
Normatively referenced by — RFC 9051: Internet Message Access Protocol (IMAP) - Version 4rev2
Normatively referenced by — RFC 7804: Salted Challenge Response HTTP Authentication Mechanism