1 of 14

Lec 7: UC-(In)Secure PAKE Protocols

2 of 14

Example 1: Diffie-Hellman key exchange is not UC-secure

  •  

3 of 14

Man-in-the-middle attack on DH not simulatable

 

 

 

 

 

 

4 of 14

  •  

5 of 14

  •  
  •  

6 of 14

  •  

7 of 14

Example 2: allowing for offline dictionary attack makes PAKE not UC-secure

  •  

8 of 14

  •  

9 of 14

  •  
  •  

10 of 14

Example 3: EKE with plain Diffie-Hellman is not UC-secure

 

 

 

 

 

 

 

 

 

11 of 14

  •  
  •  

12 of 14

  •  
  •  

13 of 14

  •  

14 of 14

  •