I am working on Password Authenticated Key Exchange (PAKE). I noted some PAKE schemes were built upon the smooth projective hash function (SPHF). I am confused why SPHF can be used to design PAKE?
I can understand the definition of SPHF and I know it is a special case of designated-verifier ZK. But what are the main advantages of SPHF for PAKE?