{
  "number": 9382,
  "title": "SPAKE2, a Password-Authenticated Key Exchange",
  "authors": [
    "W. Ladd"
  ],
  "published": "2023-09",
  "status": "Informational",
  "stream": "IRTF",
  "pages": 17,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "This document describes SPAKE2, which is a protocol for two parties that share a password to derive a strong shared key without disclosing the password. This method is compatible with any group, is computationally efficient, and has a security proof. This document predated the Crypto Forum Research Group (CFRG) password-authenticated key exchange (PAKE) competition, and it was not selected; however, given existing use of variants in Kerberos and other applications, it was felt that publication was beneficial. Applications that need a symmetric PAKE, but are unable to hash onto an elliptic curve at execution time, can use SPAKE2. This document is a product of the Crypto Forum Research Group in the Internet Research Task Force (IRTF).",
  "draft": "draft-irtf-cfrg-spake2-26",
  "doi": "10.17487/RFC9382",
  "urls": {
    "html": "https://rfc.dk/rfc9382/",
    "text": "https://rfc.dk/rfc9382.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc9382",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9382/"
  },
  "text_modified": "2023-09-30T16:20:26.465686143Z"
}