Skip to content

Comments

feat(registry): add SPAKE2 (RFC 9382) and SPAKE2+ (RFC 9383)#798

Merged
stevespringett merged 1 commit intoCycloneDX:masterfrom
Mehrn0ush:feat/crypto-registry-spake2-rfc9382-rfc9383
Feb 19, 2026
Merged

feat(registry): add SPAKE2 (RFC 9382) and SPAKE2+ (RFC 9383)#798
stevespringett merged 1 commit intoCycloneDX:masterfrom
Mehrn0ush:feat/crypto-registry-spake2-rfc9382-rfc9383

Conversation

@Mehrn0ush
Copy link
Contributor

@Mehrn0ush Mehrn0ush commented Jan 28, 2026

Summary

Add SPAKE2 (RFC 9382) and SPAKE2+ (RFC 9383) to schema/cryptography-defs.json.

References

Change

  • Add family: SPAKE2 with variants:
    • SPAKE2
    • SPAKE2[-{group}][-{hashFunction}][-{kdf}][-{mac}]
  • Add family: SPAKE2PLUS (represents SPAKE2+) with variants:
    • SPAKE2+
    • SPAKE2+[-{group}][-{hashFunction}][-{kdf}][-{mac}]

Notes:

  • family uses SPAKE2PLUS (no +) to match existing registry naming constraints, while pattern preserves the canonical protocol name SPAKE2+ from RFC 9383.
  • Entries are placed in alphabetical order within algorithms[].

Validation

  • python3 -m json.tool schema/cryptography-defs.json (JSON OK)

@Mehrn0ush Mehrn0ush requested a review from a team as a code owner January 28, 2026 19:42
@stevespringett
Copy link
Member

cc: @bhess

@stevespringett stevespringett added cap: cryptography Capability: Cryptography (CBOM) cap: cryptography-registry Capability: Cryptography Registry labels Feb 5, 2026
…DX#797)

Signed-off-by: Mehrn0ush <mehrnoush.vaseghi@gmail.com>
@Mehrn0ush Mehrn0ush force-pushed the feat/crypto-registry-spake2-rfc9382-rfc9383 branch from 372b928 to 6cd1973 Compare February 12, 2026 11:01
@Mehrn0ush
Copy link
Contributor Author

Thanks @bhess ! Agreed — I’ll remove the plain SPAKE2 and SPAKE2+ variants.

Re: family naming — I kept SPAKE2PLUS (no +) to align with existing registry family identifiers, while preserving the canonical protocol name SPAKE2+ in the variant pattern per RFC 9383. If you’d prefer family: "SPAKE2+" for consistency with the canonical name, I’m happy to update it — I kept SPAKE2PLUS only because the current registry doesn’t appear to use + in family identifiers.

Copy link
Contributor

@bhess bhess left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the update, LGTM

@stevespringett stevespringett merged commit b9aeb0b into CycloneDX:master Feb 19, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cap: cryptography Capability: Cryptography (CBOM) cap: cryptography-registry Capability: Cryptography Registry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants