Key Exchange in the Post-Snowden Era: UC Secure Subversion-Resilient PAKE

ePrint Report: Key Exchange in the Post-Snowden Era: UC Secure Subversion-Resilient PAKE

Suvradip Chakraborty, Lorenzo Magliocco, Bernardo Magri, Daniele Venturi

Password-Authenticated Key Exchange (PAKE) allows two parties to establish a common high-entropy secret from a possibly low-entropy pre-shared secret such as a password. In this work, we provide the first PAKE protocol with subversion resilience in the framework of universal composability (UC), where the latter roughly means that UC security still holds even if one of the two parties is …

entropy eprint report exchange high key low password report secret snowden subversion work