RFC 9807: The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol
In plain English — editorial summary, not part of the RFC
This document describes the OPAQUE protocol, an Augmented (or Asymmetric) Password-Authenticated Key Exchange (aPAKE) protocol that supports mutual authentication in a client-server setting without reliance on PKI and with security against pre-computation attacks upon server compromise. In addition, the protocol provides forward secrecy and the ability to hide the password from the server, even during password registration. This document specifies the core OPAQUE protocol and one instantiation based on 3DH. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.
Document record
- Document ID
- RFC9807
- Published
- July 2025
- Authors
- D. Bourdrez; H. Krawczyk; K. Lewi; C. A. Wood
- Status
- INFORMATIONAL
- Stream
- IRTF
- Area
- —
- Pages
- 73
- Also known as
- —
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?