Secure Password Authenticated Key Exchange (SPAKE2+)

Table of contents

  1. Definition
  2. Reference
  3. Terminology
  4. Deep Dive

Definition

SPAKE2+ is the security mechanism based on a Password Authenticated Key Exchange (PAKE) protocol running between two parties for deriving a strong shared key with no risk of disclosing the password. SPAKE2+ is an augmented PAKE protocol, as only one party makes direct use of the password during the execution of the protocol. The other party only needs a verification value at the time of the protocol execution instead of the password. The verification value can be computed once, during an offline initialization phase. The party using the password directly would typically be a client, and acts as a prover, while the other party would be a server, and acts as verifier. The details of SPAKE+ protocol can be found in the two links below.

Reference

Please refer to the listed reference below. That help you understand what is Base64.

Terminology

Deep Dive