[kitten] Request for review of a SASL mechanism using the OPAQUE aPAKE

[Nadja von Reitzenstein Cerpnjak <[e-mail]>]

Ohai!


I've been working on a SASL mechanism specification making use of the 
asymmetric PAKE currently being worked on by the CFRG, OPAQUE 
(https://datatracker.ietf.org/doc/draft-irtf-cfrg-opaque/).

This mechanism offers much of the same advantages of SCRAM, but OPAQUE 
additionally specifies a method to register without exposing the 
clear-text password of an user to the server, and provides a client with 
a long-term secret, that can be used as e.g. an encryption key, without 
needing any further key exchange between multiple clients of the same user.

The current text of the draft can be found here: 
https://datatracker.ietf.org/doc/draft-reitzenstein-kitten-opaque/

While this document is far from standardization, as OPAQUE is itself 
too, I would nonetheless appreciate comments or reviews. For one to make 
sure I'm on the right track with my current approach on the technical 
side, and to get feedback on getting this document moving in the 
direction of WG adoption, should there be interest in that.


Thanks,
     Nadja