{"repo":"afjoseph/plissken","free":true,"listed":false,"github":"https://github.com/afjoseph/plissken","clone":"git clone https://github.com/afjoseph/plissken.git","description":"Privacy-first Authorization Framework","language":"Go","stars":18,"topics":["authentication","authorization","cryptography","golang","javascript","oauth2","opaque","oprf","pake"],"license":"BSD-3-Clause","category":"auth-billing-email","readme_excerpt":"Plissken: A Privacy-First Authorization Framework Plissken provides the backend/frontend code needed to use Password-Authenticated Key Exchanges (or PAKE) to perform logins and registrations. The project streamlines the use of one of the best PAKEs around (the OPAQUE protocol) for both backend and frontend systems; you can think of this project as a batteries-included PAKE implementation. The goal of PAKEs is to allow authorization between clients and servers without the servers ever knowing the client's credentials: this means a user's password never needs to leave their device (e.g., browser, phone, IOT device, etc.). One of the major problems in cybersecurity today that this protocol can solve are database breaches . With PAKEs, a company's database will never store passwords for a hacker to even consider attacking and breaching. Only a password proof of a password exists will ever be stored. Here's a post by renowned cryptographer Matthew Green explaining the benefits of PAKE protocols and another by Professor of cryptography Bill Buchanan explaining the issues with sharing passwords with servers, data breaches and PAKEs in general. Overview Component Breakdown This project implements the standardized OPAQUE protocol for both backend and frontend systems. The goal of the project is to be plug-and-play: there're both backend and frontend components here to be used with easy configurations for both. I'll use the same terms as OAuth2.0) (i.e., tokens, authorization and resou","default_branch":null,"files":null,"tree":[],"storefront":"/r/afjoseph","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/afjoseph/plissken/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}