RFC 9382: SPAKE2, a Password-Authenticated Key Exchange

This document describes SPAKE2, which is a protocol for two parties that share a password to derive a strong shared key without disclosing the password. This…

Read RFC 9382 on the RFC Editor

Outgoing relationships (10 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Normative reference — RFC 8032: Edwards-Curve Digital Signature Algorithm (EdDSA)
Normative reference — RFC 5480: Elliptic Curve Cryptography Subject Public Key Information
Normative reference — RFC 4493: The AES-CMAC Algorithm
Normative reference — RFC 7914: The scrypt Password-Based Key Derivation Function
Informative reference — RFC 8265: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords