In cryptography, a password-authenticated key agreement method is an interactive method for two or more parties to establish cryptographic keys based on one or more party's knowledge of a password.

PropertyValue
dbpprop:abstract
  • In cryptography, a password-authenticated key agreement method is an interactive method for two or more parties to establish cryptographic keys based on one or more party's knowledge of a password. Password-authenticated key agreement generally encompasses methods such as: Balanced password-authenticated key exchange Augmented password-authenticated key exchange Password-authenticated key retrieval Multi-server methods Multi-party methods In the most stringent password-only security models, there is no requirement for the user of the method to remember any secret or public data other than the password. Password authenticated key exchange (PAKE) is where two or more parties, based only on their knowledge of a password, establish a cryptographic key using an exchange of messages, such that an unauthorized party (one who controls the communication channel but does not possess the password) cannot participate in the method and is constrained as much as possible from guessing the password. (The optimal case yields exactly one guess per run exchange. ) Two forms of PAKE are Balanced and Augmented methods. Balanced PAKE allows parties that use the same password to negotiate and authenticate a shared key. Examples of these are: Encrypted Key Exchange (EKE) PAK and PPK SPEKE (Simple password exponential key exchange) J-PAKE (Password Authenticated Key Exchange by Juggling) Augmented PAKE is a variation applicable to client/server scenarios, in which an attacker must perform a successful brute-force attack in order to masquerade as the client using stolen server data. Examples of these are: AMP Augmented-EKE B-SPEKE PAK-Z SRP Password-authenticated key retrieval is a process in which a client obtains a static key in a password-based negotiation with a server that knows data associated with the password, such as the Ford and Kaliski methods. In the most stringent setting, one party uses only a password in conjunction with two or more (N) servers to retrieve a static key, in a way that protects the password (and key) even if any N-1 of the servers are completely compromised.
dbpprop:hasPhotoCollection
dbpprop:reference
rdf:type
rdfs:comment
  • In cryptography, a password-authenticated key agreement method is an interactive method for two or more parties to establish cryptographic keys based on one or more party's knowledge of a password.
rdfs:label
  • Password-authenticated key agreement
owl:sameAs
skos:subject
foaf:page
is owl:sameAs of