LATKE: An identity-binding PAKE from lattice assumptions

ePrint Report: LATKE: An identity-binding PAKE from lattice assumptions

Michael Rosenberg

In a recent work, Cremers, Naor, Paz, and Ronen (CRYPTO '22) point out the problem of catastrophic impersonation in balanced password authenticated key exchange protocols (PAKEs). Namely, in a balanced PAKE, when a single party is compromised, the attacker learns the password and can subsequently impersonate anyone to anyone using the same password. The authors of the work present two solutions to this issue: CHIP, an identity-binding PAKE (iPAKE), …

authors compromised crypto eprint report exchange identity impersonation key michael party password point problem protocols report single solutions work