ayyghost

SPAKE2: Password not passed to memory-hard hash function

2

Hi, I noticed that the spake2 crate uses HKDF instead of a memory-hard hash function when converting the password to a scalar: https://github.com/RustCrypto/PAKEs/blob/04ca077f2706fbd4bb5ed903a22bdcd2f20b2b0a/spake2/src/lib.rs#L473 [According to the draft specification](https://tools.ietf.org/html/draft-irtf-cfrg-spake2-09#section-3.1), as well...