The Password Authenticated Key Exchange by Juggling (or J-PAKE) is a password-authenticated key agreement protocol, proposed by Feng Hao and Peter Ryan. This protocol allows two parties to establish private and authenticated communication solely based on their shared (low-entropy) password without requiring a Public Key Infrastructure. It provides mutual authentication to the key exchange, a feature that is lacking in the Diffie–Hellman key exchange protocol.
Description Two parties, Alice and Bob, agree on a group G {\displaystyle G} with generator g {\displaystyle g} of prime order q {\displaystyle q} in which the discrete log problem is hard. Typically a Schnorr group is used. In general, J-PAKE can use any prime order group that is suitable for public key cryptography, including Elliptic curve cryptography. Let s {\displaystyle s} be their shared (low-entropy) secret, which can be a password or a hash of a password ( s ≠ 0 {\displaystyle s\neq 0} ). The protocol executes in two rounds.
… excerpt ends here. Continue reading the full article.
