Under What Conditions Is Encrypted Key Exchange Actually Secure?

ePrint Report: Under What Conditions Is Encrypted Key Exchange Actually Secure?

Jake Januzelli, Lawrence Roy, Jiayu Xu

A Password-Authenticated Key Exchange (PAKE) protocol allows two parties to agree upon a cryptographic key, in the setting where the only secret shared in advance is a low-entropy password. The standard security notion for PAKE is in the Universal Composability (UC) framework. In recent years there have been a large number of works analyzing the UC-security of Encrypted Key Exchange (EKE), the very …

conditions cryptographic encrypted entropy eprint report exchange key low notion password protocol report secret security standard under