Link to this headingPassword Authenticated Key Exchange (PAKE)

This allows the user to send a hashed password to the server and use that to create a shared key.

Both the client and server agree on a shared key only when the client knows the password.
Both the client and server learn weather the supplied password matches the server’s expected value, and no additional information.

Types:

  • OPAQUE
  • [SRP](Secure Remote Password Protocol.md)
  • CPace