Password-Authenticated TLS via OPAQUE and Post-Handshake Authentication

ePrint Report: Password-Authenticated TLS via OPAQUE and Post-Handshake Authentication

Julia Hesse, Stanislaw Jarecki, Hugo Krawczyk, Christopher Wood

OPAQUE is an Asymmetric Password-Authenticated Key Exchange (aPAKE) protocol being standardized by the IETF (Internet Engineering Task Force) as a more secure alternative to the traditional ``password-over-TLS'' mechanism prevalent in current practice. OPAQUE defends against a variety of vulnerabilities of password-over-TLS by dispensing with reliance on PKI and TLS security, and ensuring that the password is never visible to servers or anyone other …

authentication current engineering eprint report exchange handshake internet key opaque password pki practice protocol report security task task force tls vulnerabilities wood