⌕ Поиск по атласу

IETF · RFC · RFC9807

RFC9807 · The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol

The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol

This document describes the OPAQUE protocol, an Augmented (or Asymmetric) Password-Authenticated Key Exchange (aPAKE) protocol that supports mutual authentication in a client-server setting without reliance on PKI and with security against pre-computation attacks upon server compromise. In addition, the protocol provides forward secrecy and the ability to hide the password from the server, even during password registration. This document specifies the core OPAQUE protocol and one instantiation based on 3DH. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Официальная английская аннотация

This document describes the OPAQUE protocol, an Augmented (or Asymmetric) Password-Authenticated Key Exchange (aPAKE) protocol that supports mutual authentication in a client-server setting without reliance on PKI and with security against pre-computation attacks upon server compromise. In addition, the protocol provides forward secrecy and the ability to hide the password from the server, even during password registration. This document specifies the core OPAQUE protocol and one instantiation based on 3DH. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Связи документа

Официальный источник · 2025-07-01

Полные импортированные сведения карточки
{
  "id": "RFC9807",
  "number": 9807,
  "title_en": "The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes the OPAQUE protocol, an Augmented (or Asymmetric) Password-Authenticated Key Exchange (aPAKE) protocol that supports mutual authentication in a client-server setting without reliance on PKI and with security against pre-computation attacks upon server compromise. In addition, the protocol provides forward secrecy and the ability to hide the password from the server, even during password registration. This document specifies the core OPAQUE protocol and one instantiation based on 3DH. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.",
  "authors": [
    "D. Bourdrez",
    "H. Krawczyk",
    "K. Lewi",
    "C. A. Wood"
  ],
  "organizations": [],
  "publication_date": "2025-07-01",
  "current_status": "INFORMATIONAL",
  "current_status_ru": "Информационный",
  "publication_status": "INFORMATIONAL",
  "publication_status_ru": "Информационный",
  "lifecycle": "informational",
  "lifecycle_ru": "Справочный",
  "stream": "IRTF",
  "stream_ru": "Исследовательская группа Интернета (IRTF)",
  "area": "",
  "area_ru": "",
  "working_group": "",
  "source_draft": "draft-irtf-cfrg-opaque-18",
  "page_count": 73,
  "doi": "10.17487/RFC9807",
  "keywords": [],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9807/",
    "html": "https://www.rfc-editor.org/rfc/rfc9807.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9807.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9807/"
  }
}