Encrypted Key Exchange Website Links For
Key
 

Information About

Encrypted Key Exchange




In the most general form of EKE, at least one party encrypts an ephemeral (one-time) public key using a password, and sends it to a second party, who decrypts it and uses it to negotiate a shared key with the first party.

A second paper 1 describes Augmented-EKE, and introduced the concept of augmented Password-authenticated Key Agreement for client/server scenarios. Augmented methods have the added goal of ensuring that password verification data stolen from a server cannot be used by an attacker to masquerade as the client, unless the attacker first determines the password (e.g. by performing a brute force attack on the stolen data).

A version of EKE based on Diffie-Hellman , known as DH-EKE, has survived attack and has led to improved variations, such as the PAK family of methods in IEEE P1363.2 .


REFERENCES



SEE ALSO