[curves] Use cases for PAKE?
dfaranha at gmail.com
Wed Mar 19 19:03:00 PDT 2014
It's probably not very interesting, but I'm finishing ongoing work on
combining Physical Unclonable Functions (if they exist) with PAKEs for
token-based multifactor transaction authentication in banking applications.
Diego de Freitas Aranha
Institute of Computing - University of Campinas
On Wed, Mar 19, 2014 at 8:17 PM, Trevor Perrin <trevp at trevp.net> wrote:
> On Wed, Mar 19, 2014 at 11:44 AM, Arlo Breault <arlolra at gmail.com> wrote:
>> PANDA's an interesting use case for EKE2.
> Hi Arlo,
> There was some discussion of Pond's "PANDA", and its PAKE, here:
> It's true that it uses a rough form of "EKE2" (aka the
> Bellare/Pointcheval/Rogaway formalization of what Bellovin/Merritt called
> "DH-EKE" [1,2]).
> But I don't think the PAKE provides value, since the "meeting ID"
> undermines it and enables guessing against the meeting secret (which the
> PAKE is also based on).
> My impression is that PAKE is there in the hope that the meetingID problem
> would one day be solved. But until that happens, this doesn't seem like a
> great use case.
>  http://eprint.iacr.org/2000/014.pdf
>  http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.45.3156
> Curves mailing list
> Curves at moderncrypto.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Curves