BS-SPEKE

This repo contains an early prototype implementation of the BS-SPEKE protocol for augmented password authenticated key exchange (aPAKE).

BS-SPEKE is described by Steve Thomas in his blog post SRP is Now Deprecated and in a Github Gist.

The implementation contained here is built with Loup Vaillant's Monocypher library, with the encryption routines removed to allow this project to be more easily (and legally) exported from the US.

It uses D.J. Bernstein's elliptic curve Curve25519.

Disclaimer

This code has not undergone any sort of security audit or evaluation. Please do not use it for anything serious at this time.