Re: [Cfrg] Requirements for PAKE schemes

[Schmidt, Jörn-Marc <[e-mail]>]

Dear Paul,

Thanks a lot for your feedback.

>Nicely written Š A couple general comments, in section 5 it states:
>"This technique can be used  to parlay a short one-time code, into a
long-lived public key.²
>This seems much more interesting than just setting up shared secrets.
Perhaps it could be included in the MAY comments to help promote the
>addressing of this capability.  A PAKE plus long-lived public key is an
important building block for pairing/setup of devices that use public keys
for authentication.

I'll add a MAY requirement in the next version. 


>Where long-lived public keys are used, a requirement should also be added
to discuss the privacy properties of the scheme.

Good point - I'm happy to address privacy in the next version.

Cheers,

Jörn