RFC 9807: The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol

This document describes the OPAQUE protocol, an Augmented (or Asymmetric) Password-Authenticated Key Exchange (aPAKE) protocol that supports mutual…

Read RFC 9807 on the RFC Editor

Outgoing relationships (16 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 9497: Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Informative reference — RFC 8017: PKCS #1: RSA Cryptography Specifications Version 2.2
Informative reference — RFC 7748: Elliptic Curves for Security
Informative reference — RFC 8018: PKCS #5: Password-Based Cryptography Specification Version 2.1
Informative reference — RFC 9180: Hybrid Public Key Encryption
Informative reference — RFC 7914: The scrypt Password-Based Key Derivation Function
Informative reference — RFC 9106: Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications
Informative reference — RFC 9380: Hashing to Elliptic Curves
Informative reference — RFC 9496: The ristretto255 and decaf448 Groups
Informative reference — RFC 8125: Requirements for Password-Authenticated Key Agreement (PAKE) Schemes