Skip to content
#

rfc9382

Here are 3 public repositories matching this topic...

Language: All
Filter by language

Browser-based SPAKE2/SPAKE2+ demo — RFC 9382/9383. Same handshake, same session key — the difference appears when the server leaks. SPAKE2 stored the password: the attacker is now the client. SPAKE2+ stored a verifier: the attacker gets an offline dictionary attack. Real M/N masking over P-256. No backends. No simulated math.

  • Updated Sep 10, 2026
  • TypeScript

Add this topic to your repo

To associate your repository with the rfc9382 topic, visit your repo's landing page and select "manage topics."

Learn more