[Crypto-panel] Two questions to be added to the Round 2 questions list for nominated PAKEs

"Stanislav V. Smyshlyaev" <smyshsv@gmail.com> Wed, 20 November 2019 06:05 UTC

MIME-Version: 1.0
From: "Stanislav V. Smyshlyaev" <smyshsv@gmail.com>
Date: Wed, 20 Nov 2019 09:04:50 +0300
Message-ID: <CAMr0u6=n_8-Wz312H=ugMOmZtgsRx1RaiPmX36F-qMjK5y-3rA@mail.gmail.com>
To: crypto-panel@irtf.org
Cc: cfrg-chairs@ietf.org
Content-Type: multipart/alternative; boundary="0000000000000488720597c0f6ff"
Archived-At: <https://mailarchive.ietf.org/arch/msg/crypto-panel/Cp_2oBcn-j3g4Cu_eJQLWgL5ME4>
Subject: [Crypto-panel] Two questions to be added to the Round 2 questions list for nominated PAKEs
Precedence: list

Dear CFRG chairs and Crypto Review Panel members,

Please add the following question to the list of additional questions to be
asked at Round 2 of the PAKE selection process.

- Can you propose a modification of SPAKE2 (preserving all existing good
properties of SPAKE2) with a correspondingly updated security proof,
addressing the issue of a single discrete log relationship necessary for
the security of all sessions (e.g., solution based on using
M=hash2curve(A|B), N=hash2curve(B|A))?

- Can you propose a modification of CPace and AuCPace (preserving all
existing good properties of these PAKEs) with a correspondingly updated
security proof (maybe, in some other security models), addressing the issue
of requiring the establishment of a session identifier (sid) during each
call of the protocol for the cost of one additional message?

Regards,
Stanislav Smyshlyaev, Ph.D.,
Deputy CEO, CryptoPro LLC

[Crypto-panel] Two questions to be added to the R… Stanislav V. Smyshlyaev