Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pake]

Password-Authenticated Key Exchanges (PAKE) are authenticated key exchange protocols where the long term secret is a (low entropy) password. I.e., it's a 2-party protocol with at least one party using a password to authenticate themselves to the other party. A PAKE guarantees, that the parties establish a shared session key if and only if authentication was successful. Due to the low entropy of passwords, it's crucial to prevent offline dictionary attacks.

4
votes
0answers
40 views

Can “OPAQUE-over-TLS” authentication be optimized?

So while discussing the issues of password-hashing off-loading in our chat I noticed that it's easy to extend OPAQUE (CFRG draft) to essentially be a better standard password based authentication when ...
6
votes
1answer
102 views

Why would the use of Curve25519 in Dragonfly leak information?

An answer explaining Dragonfly, a form of key exchange used in WPA3, has an interesting footnote: One final note: reviewing the Firefly RFC, I see that it would (as written) leak some information ...
1
vote
1answer
110 views

How does Dragonfly key exchange work, in non-white-paper terms?

I'm trying to understand WPA3, whose Simultaneous Authentication of Equals is supposedly similar to Dragonfly Key Exchange. Dragonfly is resistant to dictionary attacks, meaning that rather than an ...
3
votes
1answer
54 views

Secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent

Are there any secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent? This would be useful for many ...
1
vote
1answer
324 views

Designing of Password Authenticated Key Exchange (PAKE) Schemes?

I am started working in post quantum cryptography(lattice based cryptography) specifically in Password Authenticated Key Exchange (PAKE). I come across many PAKE key exchange scheme (like this one) ...
5
votes
1answer
132 views

Provably Secure Password Authenticated Key Exchange Based on RLWE for the Post-QuantumWorld

In this paper (Provably Secure Password Authenticated Key Exchange Based on RLWE for the Post-Quantum World), author describe password authenticated key exchange scheme on page 9 and 10 (see Fig. 1 on ...
2
votes
1answer
218 views

Can the TLS 1.3 PSK-DHE handshake be turned into a PAKE?

Recently, we had the question whether there's a PAKE that uses more standard, higher-level primitives than what SRP offers. Now this made me think and ask myself: TLS does have a PSK mode, can't we ...
2
votes
0answers
67 views

PAKE PSF with very trivial/leaky passwords [closed]

I want Alice to symmetrically encrypt a large file, transmit it over a public network and have Bob decrypt it. The shared secret of the two is a password, potentially very simple and may be reused ...
4
votes
2answers
220 views

On the security definition of password-authenticated key exchange

I found in all PAKE papers, the security is defined as something like this: Let $Succ(A)$ be the probability that an attacker $A$ successfully distinguished the session key from a random string. Then ...
1
vote
1answer
51 views

Do random oracles are called even by honest users in the PAK protocol [BMK00]?

In the full-length proof of PAK scheme, the authors made extensive use of random oracles to extract (guessed) password from the messages generated by the real world adversary for the ideal world ...
2
votes
1answer
201 views

J-PAKE : About Schnorr NIZK proof for ephemeral private keys

Reading J-PAKE Authenticated Key Exchange Without PKI document : J-PAKE Round 1 : Alice sends out g^x1 and knowledge proof for x1, e.g : To prove the knowledge of the exponent for X = g^x1 ...
1
vote
1answer
269 views

About DH-EKE and ECDHE_PSK (PSK versus Pasword)

I am currently having a look at J-PAKE , so learning about Authenticated Key Exchange : Reading 2.2.2 E.K.E from this paper https://people.kth.se/~maguire/Erik_Ehrlund_Literature_Study_report_v1.2.pdf ...
1
vote
0answers
144 views

EC based password authenticated key exchange protocol

I would like to know: What is the currently best (efficiency and security wise) known EC based password authenticated key exchange protocol? (i.e. is there any EC based protocol may be similar to DH ...