Subject: [Crypto-panel] Two questions to be added to the Round 2 questions list for nominated PAKEs

From: "Stanislav V. Smyshlyaev" <[email-masked]>
Date: Wed, 20 Nov 2019 09:04:50 +0300

Dear CFRG chairs and Crypto Review Panel members,

Please add the following question to the list of additional questions to be
asked at Round 2 of the PAKE selection process.

- Can you propose a modification of SPAKE2 (preserving all existing good
properties of SPAKE2) with a correspondingly updated security proof,
addressing the issue of a single discrete log relationship necessary for
the security of all sessions (e.g., solution based on using
M=hash2curve(A|B), N=hash2curve(B|A))?

- Can you propose a modification of CPace and AuCPace (preserving all
existing good properties of these PAKEs) with a correspondingly updated
security proof (maybe, in some other security models), addressing the issue
of requiring the establishment of a session identifier (sid) during each
call of the protocol for the cost of one additional message?

Regards,
Stanislav Smyshlyaev, Ph.D.,
Deputy CEO, CryptoPro LLC