Universally Composable Relaxed Password Authenticated Key Exchange - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2020

Universally Composable Relaxed Password Authenticated Key Exchange


Protocols for password authenticated key exchange (PAKE) allow two parties who share only a weak password to agree on a cryptographic key. We revisit the notion of PAKE in the universal composabil-ity (UC) framework, and propose a relaxation of the PAKE functionality of Canetti et al. that we call lazy-extraction PAKE (lePAKE). Our relaxation allows the ideal-world adversary to postpone its password guess until after a session is complete. We argue that this relaxed notion still provides meaningful security in the password-only setting. As our main result, we show that several PAKE protocols that were previously only proven secure with respect to a "game-based" definition of security can be shown to UC-realize the lePAKE functionality in the random-oracle model. These include SPEKE, SPAKE2, and TBPEKE, the most efficient PAKE schemes currently known.
Fichier principal
Vignette du fichier
main.pdf (468.08 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02948678 , version 1 (12-11-2020)



Michel Abdalla, Manuel Barbosa, Tatiana Bradley, Stanisław Jarecki, Jonathan Katz, et al.. Universally Composable Relaxed Password Authenticated Key Exchange. CRYPTO 2020 - 40th Annual International Cryptology Conference, Aug 2020, Santa Barbara / Virtual, United States. pp.278-307, ⟨10.1007/978-3-030-56784-2_10⟩. ⟨hal-02948678⟩
114 View
318 Download



Gmail Facebook X LinkedIn More