Bare PAKE: Universally Composable Key Exchange from just Passwords

ePrint Report: Bare PAKE: Universally Composable Key Exchange from just Passwords

Manuel Barbosa, Kai Gellert, Julia Hesse, Stanislaw Jarecki

In the past three decades, an impressive body of knowledge has been built around secure and private password authentication. In particular, secure password-authenticated key exchange (PAKE) protocols require only minimal overhead over a classical Diffie-Hellman key exchange. PAKEs are also known to fulfill strong composable security guarantees that capture many password-specific concerns such as password correlations or password mistyping, to name …

authentication body eprint report exchange key knowledge password password authentication passwords private protocols report