Python 3 implementation of SPAKE2+ protocol, according to RFC 9383
-
Updated
Jul 20, 2026 - Python
Python 3 implementation of SPAKE2+ protocol, according to RFC 9383
Browser-based SPAKE2/SPAKE2+ demo — RFC 9382/9383. Same handshake, same session key — the difference appears when the server leaks. SPAKE2 stored the password: the attacker is now the client. SPAKE2+ stored a verifier: the attacker gets an offline dictionary attack. Real M/N masking over P-256. No backends. No simulated math.
Add a description, image, and links to the rfc9383 topic page so that developers can more easily learn about it.
To associate your repository with the rfc9383 topic, visit your repo's landing page and select "manage topics."