Re: [TLS] Augmented PAKE (Re: New Version Notification for draft-shin-tls-augpake-01.txt)

Hi Fabrice,

Thank you for your comment!

Section 5.1 can be used in TLS 1.3 handshake (?) as in Eric's presentation
:)

>How does the client knows which group to use ?
As you pointed out, we need to change Section 5.1 for the current tls
version.
A naive approach is to add one round exchange after ServerHello.
Any other good ideas?

Regards,
Shin

On Fri, Nov 8, 2013 at 1:20 AM, Fabrice Gautier
<fabrice.gautier@gmail.com>wrote:

> Hi,
>
> How does the client knows which group to use ?
>
> As the client would need to know the group before sending the
> ClientHello, it seems that the client needs to remember the groups
> parameters along with the password, which seems impractical.
>
>
> -- Fabrice
>
>
> On Wed, Nov 6, 2013 at 11:25 AM, SeongHan Shin <seonghan.shin@aist.go.jp>
> wrote:
> > Dear all,
> >
> > For anyone who are interested in PAKE, pls see the below I-D regarding
> > augmented PAKE.
> >
> > IMO, two reasons that SRP was published as RFC 2945 and included in IEEE
> > 1363.2 and ISO/IEC 11770-4 are 1) SRP is an augmented PAKE and 2) the
> > server's computation cost of SRP is a minimum.
> > (Though SRP has no provable security)
> >
> > The AugPAKE in the below I-D is provably secure and more efficient than
> > other augmented PAKEs (including SRP and AMP).
> >
> > Of course, augmented PAKE provides additional security property over
> > (balanced) PAKE.
> >
> > Best regards,
> > Shin
> >
> >
> > On Wed, Sep 4, 2013 at 6:39 PM, SeongHan Shin <seonghan.shin@aist.go.jp>
> > wrote:
> >>
> >> Dear all,
> >>
> >> I submitted a new version of our I-D regarding augmented PAKE (AugPAKE)
> >> and its integration into TLS.
> >> I added some features of AugPAKE in Appendix.
> >> Any comments are welcome!
> >>
> >> Best regards,
> >> Shin
> >>
> >> ---------- Forwarded message ----------
> >> From: <internet-drafts@ietf.org>
> >> Date: Wed, Sep 4, 2013 at 6:26 PM
> >> Subject: New Version Notification for draft-shin-tls-augpake-01.txt
> >> To: Kazukuni Kobara <kobara_conf-ml@aist.go.jp>, SeongHan Shin
> >> <seonghan.shin@aist.go.jp>
> >>
> >>
> >>
> >> A new version of I-D, draft-shin-tls-augpake-01.txt
> >> has been successfully submitted by SeongHan Shin and posted to the
> >> IETF repository.
> >>
> >> Filename:        draft-shin-tls-augpake
> >> Revision:        01
> >> Title:           Augmented Password-Authenticated Key Exchange for
> >> Transport Layer Security (TLS)
> >> Creation date:   2013-09-04
> >> Group:           Individual Submission
> >> Number of pages: 19
> >> URL:
> >> http://www.ietf.org/internet-drafts/draft-shin-tls-augpake-01.txt
> >> Status:          http://datatracker.ietf.org/doc/draft-shin-tls-augpake
> >> Htmlized:        http://tools.ietf.org/html/draft-shin-tls-augpake-01
> >> Diff:
> >> http://www.ietf.org/rfcdiff?url2=draft-shin-tls-augpake-01
> >>
> >> Abstract:
> >>    This document describes an efficient augmented password-authenticated
> >>    key exchange (AugPAKE) protocol where a user remembers a low-entropy
> >>    password and its verifier is registered in the intended server.  In
> >>    general, the user password is chosen from a small set of dictionary
> >>    whose space is within the off-line dictionary attacks.  The AugPAKE
> >>    protocol described here is secure against passive attacks, active
> >>    attacks and off-line dictionary attacks (on the obtained messages
> >>    with passive/active attacks), and also provides resistance to server
> >>    compromise (in the context of augmented PAKE security).  Based on the
> >>    AugPAKE protocol, this document also specifies a new password-only
> >>    authentication handshake for Transport Layer Security (TLS) protocol.
> >>
> >>
> >>
> >>
> >> Please note that it may take a couple of minutes from the time of
> >> submission
> >> until the htmlized version and diff are available at tools.ietf.org.
> >>
> >> The IETF Secretariat
> >>
> >>
> >>
> >>
> >> --
> >> ------------------------------------------------------------------
> >> SeongHan Shin
> >> Research Institute for Secure Systems (RISEC),
> >> National Institute of Advanced Industrial Science and Technology (AIST),
> >> Central 2, 1-1-1, Umezono, Tsukuba City, Ibaraki 305-8568 Japan
> >> Tel : +81-29-861-2670/5284
> >> Fax : +81-29-861-5285
> >> E-mail : seonghan.shin@aist.go.jp
> >> ------------------------------------------------------------------
> >
> >
> >
> >
> > --
> > ------------------------------------------------------------------
> > SeongHan Shin
> > Research Institute for Secure Systems (RISEC),
> > National Institute of Advanced Industrial Science and Technology (AIST),
> > Central 2, 1-1-1, Umezono, Tsukuba City, Ibaraki 305-8568 Japan
> > Tel : +81-29-861-2670/5284
> > Fax : +81-29-861-5285
> > E-mail : seonghan.shin@aist.go.jp
> > ------------------------------------------------------------------
> >
> > _______________________________________________
> > TLS mailing list
> > TLS@ietf.org
> > https://www.ietf.org/mailman/listinfo/tls
> >
>

-- 
------------------------------------------------------------------
SeongHan Shin
Research Institute for Secure Systems (RISEC),
National Institute of Advanced Industrial Science and Technology (AIST),
Central 2, 1-1-1, Umezono, Tsukuba City, Ibaraki 305-8568 Japan
Tel : +81-29-861-2670/5284
Fax : +81-29-861-5285
E-mail : seonghan.shin@aist.go.jp
------------------------------------------------------------------