Pretty-Simple Password-Authenticated Key-Exchange Protocol

Kazukuni Kobara, Hideki Imai

We propose pretty simple password-authenticated key-exchange protocol which is based on the difficulty of solving DDH problem. It has the following advantages: (1) Both $y_1$ and $…