Repository navigation
Feature request: OPAQUE PAKE Protocol #2231
Description
Activity
I am interested in this as well.
I would like to suggest having a look at Owl, an alternative augmented PAKE protocol that is obtained by adapting J-PAKE to an augmented setting with additional security against server compromise, yet with lower computation than J-PAKE. Owl doesn't have the open security/implementation issues faced by OPAQUE such as (constant-time) hash-to-curve, the leakage of password update to passive attackers and an undetectable online dictionary attack. The peer-reviewed Owl paper explains these issues in more detail: https://eprint.iacr.org/2023/768.pdf. A full implementation of Owl in the EC setting has been submitted to Bouncycastle in this pull request: #2168. Anyone can try it out.
Thanks. I hope it will be ported to .NET.
Hi,
I'd be grateful if you could implement the OPAQUE Asymmetric PAKE Protocol.
Is there any plan to do it in the near future?
Thanks!