On Thu, Oct 23, 2014 at 7:16 PM, Watson Ladd <watsonbladd at gmail.com> wrote: > Dear all, > I was rereading the SPAKE2 paper, and the proof seems to be only a > sketch. Is there a version with more details, or will I have to go > work them out myself? This is the version I'm aware of: http://www.di.ens.fr/~abdalla/papers/AbPo05a-letter.pdf Trevor