rfc-8492

Secure Password Ciphersuites for Transport Layer Security (TLS)

D. Harkins (Editor)
date2019-02 streamINDEPENDENT statusINFORMATIONAL pages40 canonicalhttps://www.rfc-editor.org/rfc/rfc8492 doi10.17487/RFC8492 errataview
This memo defines several new ciphersuites for the Transport Layer Security (TLS) protocol to support certificateless, secure authentication using only a simple, low-entropy password. The exchange is called "TLS-PWD". The ciphersuites are all based on an authentication and key exchange protocol, named "dragonfly", that is resistant to offline dictionary attacks.