%% You should probably cite rfc9588 instead of this I-D. @techreport{ietf-kitten-krb-spake-preauth-11, number = {draft-ietf-kitten-krb-spake-preauth-11}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-kitten-krb-spake-preauth/11/}, author = {Nathaniel McCallum and Simo Sorce and Robbie Harwood and Greg Hudson}, title = {{SPAKE Pre-Authentication}}, pagetotal = 37, year = 2024, month = jan, day = 10, abstract = {This document defines a new pre-authentication mechanism for the Kerberos protocol. The mechanism uses a password-authenticated key exchange to prevent brute-force password attacks, and may optionally incorporate a second factor.}, }