[curves] PAKE questions

[Trevor Perrin]

On Sun, Feb 8, 2015 at 10:08 PM, Trevor Perrin <trevp at trevp.net> wrote:
>
> Setting M == N is easy - Mike Scott proposed it in 2001 [1], and
> Kobara/Imai published a proof in 2003 [2].  So that simplifies the
> protocol, and seems adequate for the "simultaneous initiate" case
> (Pond, Petmail, 802.11S).

Oops, missing references:

[1] https://groups.google.com/forum/#!msg/sci.crypt/4Rie3Yd64BI/H0wSm7m6xxAJ
[2] http://eprint.iacr.org/2003/038.pdf