[curves] SPAKE2 proof

Watson Ladd watsonbladd at gmail.com
Thu Oct 23 19:16:15 PDT 2014

Dear all,
I was rereading the SPAKE2 paper, and the proof seems to be only a
sketch. Is there a version with more details, or will I have to go
work them out myself?

In particular, it's not entirely clear what the intermediate games
are. I was hoping one of them would be attacker sends point, honest
party replies, attacker must guess secret, because that turns a
proposed protocol for Zigbee into a secure protocol.

Watson Ladd

More information about the Curves mailing list