SPAKE2 implementation in Chrome
05 December 2013 ∞
The Chrome browser provides an implementation (p224_spake.h, p224_spake.cc) for the password-based encrypted key exchange protocol SPAKE2. This code is implemented in C++ and its operations are based over the elliptic group NIST P-224, using their standalone implementation (p224.h, p224.cc).
Note: In the SPAKE protocols it is vitally important to either validate the public points used to mask the password or to use as they do in this implementation hard-coded static points with verifiable non-random seeds.