Skip to content
#

rfc9383

Here are 2 public repositories matching this topic...

Language: All
Filter by language

Browser-based SPAKE2/SPAKE2+ demo — RFC 9382/9383. Same handshake, same session key — the difference appears when the server leaks. SPAKE2 stored the password: the attacker is now the client. SPAKE2+ stored a verifier: the attacker gets an offline dictionary attack. Real M/N masking over P-256. No backends. No simulated math.

  • Updated Jul 16, 2026
  • TypeScript

Improve this page

Add a description, image, and links to the rfc9383 topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the rfc9383 topic, visit your repo's landing page and select "manage topics."

Learn more