Browser-based SPAKE2/SPAKE2+ demo — RFC 9382/9383. Same handshake, same session key — the difference appears when the server leaks. SPAKE2 stored the password: the attacker is now the client. SPAKE2+ stored a verifier: the attacker gets an offline dictionary attack. Real M/N masking over P-256. No backends. No simulated math.
cryptography spake2 pake p256 key-exchange crypto-lab password-authentication rfc9383 rfc9382 augmented-pake password-authenticated-key-exchange spake2-plus balanced-pake
-
Updated
Sep 3, 2026 - TypeScript