cfrg/draft-irtf-cfrg-opaque

Issues

• export_key encrypted blobs stored on the server come with liabilities

  #459 opened 3 months ago by stef
  3

• updates authenticated by opaque

  #451 opened 2 months ago by stef
  7

• how to mixin the client and server identity into the oprf?

  #452 opened 2 months ago by stef
  4

• mark sensitive variables?

  #453 opened 2 months ago by stef
  10

• Serialization of Diffie-Hellman output to allow use of HSM protected keys

  #444 opened 6 months ago by Razumain
  6

• question re derivation of oprf_key from oprf_seed

  #450 opened 6 months ago by stef
  2

• 2 citation anchors for 1 document

  #442 opened 8 months ago by tsahara
  0

• checking of password strength

  #434 opened 9 months ago by stef
  15

• explicit auth necessary for opaque security?

  #440 opened 9 months ago by stef
  3

• Inconsistency about OPRF seed reusage

  #426 opened a year ago by daxpedda
  2

• Incorrect signature of function `Preamble`

  #418 opened a year ago by k13n
  4

• Random Oracle Requirements for AKE

  #414 opened a year ago by daxpedda
  6

• detecting password change

  #412 opened a year ago by stef
  6

• recommend argon2i instead of scrypt in configurations

  #376 opened a year ago by stef
  18

• Slowing down attacks on compromised database

  #395 opened a year ago by mitar
  5

• Align reference implementation with the specification

  #323 opened 2 years ago by chris-wood
  2

• 2 factor authentication

  #410 opened 2 years ago by stsch9
  2

• User enumeration on registration

  #388 opened 2 years ago by mitar
  10

• Harmonize variable and function names

  #406 opened 2 years ago by bytemare
  0

• Return values of the Recover and RecoverCredentials functions

  #384 opened 2 years ago by stsch9
  3

• Use of server_private_key in offline registration

  #390 opened 2 years ago by mitar
  1

• Distributing the server

  #389 opened 2 years ago by mitar
  11

• Rotating server keypair

  #392 opened 2 years ago by mitar
  4

• Migration to a new protocol version, hash, etc.

  #394 opened 2 years ago by mitar
  7

• `params` in `Stretch`

  #398 opened 2 years ago by daxpedda
  4

• Include test vectors for Argon2id

  #399 opened 2 years ago by armfazh
  1

• what is the salt value for Argon2id?

  #400 opened 2 years ago by armfazh
  2

• Registration requires integrity protected channel

  #393 opened 2 years ago by mitar
  1

• Test cases for edge cases and failing conditions

  #309 opened 2 years ago by bytemare
  3

• Is server private key used in AKE protocol?

  #391 opened 2 years ago by mitar
  2

• Listing more implementations

  #386 opened 2 years ago by mitar
  2

• Update Test Vectors to VOPRF draft version 17

  #382 opened 2 years ago by daxpedda
  2

• Questions on OPAQUE Implementations

  #361 opened 2 years ago by afbase
  6

• Allow changing Preable construction & usage in OPAQUE-3DH

  #375 opened 2 years ago by dequbed
  6

• why keyshare why not ephemeral key pairs?

  #371 opened 2 years ago by stef
  3

• OPAQUE-3DH config and example are inconsistent

  #370 opened 2 years ago by stef
  2

• `Ne` is undefined

  #369 opened 2 years ago by crockeea
  0

• Failure handling

  #312 opened 2 years ago by daxpedda
  6

• Remove Nseed in favor of Nok everywhere

  #359 opened 2 years ago by chris-wood
  3

• Replace symmetric masking_key protection with an asymmetric method

  #310 opened 2 years ago by bytemare
  12

• "ke2.inner_ke2" is missing a definition

  #363 opened 2 years ago by kevinlewi
  0

• Mismatch of function signatures in AKE section

  #356 opened 2 years ago by kevinlewi
  1

• Add more prose

  #334 opened 3 years ago by chris-wood
  0

• Should the OPRF seed and client keypair be different per client?

  #346 opened 3 years ago by jamesw1892
  3

• Rework AKE messages and structures

  #336 opened 3 years ago by chris-wood
  0

• does the authorization mac check really have to be constant time?

  #341 opened 3 years ago by stef
  9

• include metadata about MHF in envelope

  #337 opened 3 years ago by armfazh
  2

• Adopt VOPRF DeriveKeyPair

  #328 opened 3 years ago by chris-wood
  0

• tripledhikm redunantly and confusingly needs 6 parameters while it works really on only 4

  #321 opened 3 years ago by stef
  3

• Align with VOPRF-09

  #324 opened 3 years ago by chris-wood
  1