[Cfrg] I-D Action: draft-irtf-cfrg-augpake-07.txt
internet-drafts@ietf.org Tue, 17 January 2017 07:58 UTC
Return-Path: <internet-drafts@ietf.org>
X-Original-To: cfrg@ietf.org
Delivered-To: cfrg@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4855C1293FD; Mon, 16 Jan 2017 23:58:07 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.40.3
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <148463988729.22474.5347523908294210024.idtracker@ietfa.amsl.com>
Date: Mon, 16 Jan 2017 23:58:07 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/70RmRAQ7FlSk0a3cDbb1bAF2nCA>
Cc: cfrg@ietf.org
Subject: [Cfrg] I-D Action: draft-irtf-cfrg-augpake-07.txt
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.17
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jan 2017 07:58:07 -0000
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Crypto Forum of the IETF. Title : Augmented Password-Authenticated Key Exchange (AugPAKE) Authors : SeongHan Shin Kazukuni Kobara Filename : draft-irtf-cfrg-augpake-07.txt Pages : 20 Date : 2017-01-16 Abstract: This document describes a secure and highly-efficient augmented password-authenticated key exchange (AugPAKE) protocol where a user remembers a low-entropy password and its verifier is registered in the intended server. In general, the user password is chosen from a small set of dictionary whose space is within the off-line dictionary attacks. The AugPAKE protocol described here is secure against passive attacks, active attacks and off-line dictionary attacks (on the obtained messages with passive/active attacks). Also, this protocol provides resistance to server compromise in the context that an attacker, who obtained the password verifier from the server, must at least perform off-line dictionary attacks to gain any advantage in impersonating the user. The AugPAKE protocol is not only provably secure in the random oracle model but also the most efficient over the previous augmented PAKE protocols (SRP and AMP). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-irtf-cfrg-augpake/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-irtf-cfrg-augpake-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-irtf-cfrg-augpake-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/
- [Cfrg] I-D Action: draft-irtf-cfrg-augpake-07.txt internet-drafts