Skip to content
#

spake2-plus

Here is 1 public repository matching this topic...

Browser-based SPAKE2/SPAKE2+ demo — RFC 9382/9383. Same handshake, same session key — the difference appears when the server leaks. SPAKE2 stored the password: the attacker is now the client. SPAKE2+ stored a verifier: the attacker gets an offline dictionary attack. Real M/N masking over P-256. No backends. No simulated math.

  • Updated Jul 16, 2026
  • TypeScript

Improve this page

Add a description, image, and links to the spake2-plus topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the spake2-plus topic, visit your repo's landing page and select "manage topics."

Learn more