Difference between revisions of "SPAKE"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | Kerberos clients can now use SPAKE to strengthen their handshake with a FreeIPA KDC based on elliptic curve cryptography. See [[IETF]] draft draft-ietf-kitten-krb-spake-preauth-05 and relevant portions of | + | Kerberos clients can now use SPAKE to strengthen their handshake with a FreeIPA KDC based on elliptic curve cryptography. See [[IETF]] draft draft-ietf-kitten-krb-spake-preauth-05 ([[2018]]) and relevant portions of krb5.conf(5) and kdc.conf(5) for details. SPAKE is enabled for new IPA servers and clients by default. |
| − | |||
| + | == Related terms == | ||
| + | * Password authenticated key exchange (PAKE) | ||
| + | * [[wikipedia:Password-authenticated key agreement]] | ||
== See also == | == See also == | ||
* {{Kerberos}} | * {{Kerberos}} | ||
Latest revision as of 12:10, 13 July 2020
Kerberos clients can now use SPAKE to strengthen their handshake with a FreeIPA KDC based on elliptic curve cryptography. See IETF draft draft-ietf-kitten-krb-spake-preauth-05 (2018) and relevant portions of krb5.conf(5) and kdc.conf(5) for details. SPAKE is enabled for new IPA servers and clients by default.
Related terms[edit]
- Password authenticated key exchange (PAKE)
- wikipedia:Password-authenticated key agreement
See also[edit]
Advertising:
