Skip to content

Support for SPAKE2+ in the Crypto PAKE API #66

@athoelke

Description

@athoelke

There is a request to support SPAKE2+ in the Crypto API. This will require additions and changes to the PAKE extension API (currently beta), as SPAKE2+ is quite different in operation to EC J_PAKE.

An updated proposal document is available in #73 (the first draft was #65). A key comment in the proposal:

SPAKE2+ Version

SPAKE2+, an Augmented PAKE Draft 02, 10 December 2020 is considered for proposal.

Link : https://tools.ietf.org/pdf/draft-bar-cfrg-spake2plus-02.pdf

Remarks

  • SPAKE2+, an Augmented PAKE Draft 08, 5 May 2022 is the latest draft version. Link : https://datatracker.ietf.org/doc/pdf/draft-bar-cfrg-spake2plus-08
  • Shared Secret Key generation is not compatible between Draft 02 and 08.
  • As most SPAKE2+ implementations e.g. Matter Specification Version 1.0 are based on Draft 02, this version is being considered for better interoperability.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Crypto APIIssue or PR related to the Cryptography APIenhancementNew feature or request

    Type

    No type

    Projects

    Status

    Done

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions