Let’s Talk about PAKE

• Opaque

  1 28 0.0 C

  An implementation of the OPAQUE protocol (by GeorgeLyon)

There's some dust on it, but I made a proof-of-concept OPAQUE implementation some years back (disclaimer: this was done for educational, not security purposes). The README has some good discussion of the various components of OPAQUE, and I'd argue the code (mostly C) is quite readable. If folks are interested, I'd encourage them to take a look: https://github.com/GeorgeLyon/Opaque.

• gopaque

  1 59 10.0 Go

  Go implementation of OPAQUE (hidden password user registration and auth)

A few years ago, I saw this article and wrote https://github.com/cretz/gopaque as a learning exercise (meaning I am no cryptographer, code has not been vetted, probably outdated, etc).

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• pake

  5 192 0.0 Go

  PAKE library for generating a strong secret between parties over an insecure channel (by schollz)

Library for PAKE (but not OPAQUE specifically) in Go: https://github.com/schollz/pake

• matrix-doc

  71 749 9.5 HTML

  Discontinued Proposals for changes to the matrix specification [Moved to: https://github.com/matrix-org/matrix-spec-proposals]

  

> The server can store a sha256 of the PBKDF2 output of your client hashing process or whatevs?

Before we started working on the PAKE thing, I actually kludged together something similar in my own client:

https://github.com/matrix-org/matrix-doc/pull/3265

Suggest a related project