Re: [Cfrg] A new generalized version of SESPAKE RFC draft

["Stanislav V. Smyshlyaev" <[e-mail]>]

Dear colleagues,

We've updated a SESPAKE RFC draft (
https://datatracker.ietf.org/doc/draft-smyshlyaev-sespake/) – namely, we've
made some minor corrections of the test examples after final compatibility
testing of two implementations that are starting to being distributed – and
looking forward to a fruitful discussion of PAKE proposals in Berlin (hope
to make a 10-minute talk at CFRG section in July – many thanks to Kenny and
Alexey for the opportunity).


Regards,

Stanislav V. Smyshlyaev, Ph.D.,

Head of Information Security Department,

CryptoPro LLC



2016-05-05 7:30 GMT+03:00 Stanislav V. Smyshlyaev <[e-mail]>:

> Dear colleagues,
>
> we've updated the SESPAKE RFC draft (
> https://datatracker.ietf.org/doc/draft-smyshlyaev-sespake/) to generalize
> the protocol and to exclude strict conditions of GOST usage.
>
> All our statements (posted by me previously to CFRG) about conformity of
> SESPAKE to PAKE requirements remain true, as well as the full security
> proof (http://eprint.iacr.org/2015/1237) – it is based only on the
> conditions that the underlying primitives (hash function, elliptic curve,
> HMAC) are secure (in the corresponding adversary models).
>
> All test vectors remain based on GOST hash/HMAC and elliptic curves from RFC
> 7836 <https://tools.ietf.org/html/rfc7836>.
>
>
> Thanks a lot to Jörn for his work on PAKE requirements RFC and for our
> discussion – I hope, it helped to make both RFC drafts (PAKE requirements
> and SESPAKE) better.
>
>
> Best regards,
>
> Stanislav
>
>