Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in networks and systems

Innovative Approaches to Strengthening PAKE Protocols and Quantum-Secure Key Exchange

Naeim Rahmani, Taoufik Serraj

Published Jan 1, 2026• 0 citations
Publisher
DOI
10.1007/978-3-032-18860-1_12

Related papers

Strengthening the security of key exchange protocols

Michèle Feltz

•Jan 1, 2014•0 citations

QT-PAKE: Secure Messaging via Quantum-Safe Threshold PAKE

Zengpeng Li, Hao Zhu, Guangyu Liao +3 more

Password authentication is a prevalent method of user verification across the Internet, and its use extends to scenarios where resources are limited. However, current password authentication protocols primarily rely on traditional password authenticated key exchange (PAKE) protocols (e.g., SRP, OPAQUE), which are vulnerable to attacks by quantum adversaries. To date, no efficient quantum algorithm has been found to solve the common challenges in lattice-based cryptography. Therefore, quantum-resistant PAKE protocols are generally built upon lattice-based cryptography. In this work, we propose a threshold verifiable oblivious pseudorandom function () protocol based on secret sharing. We then integrate it into a PAKE protocol and present an instantiation of a quantum-safe threshold PAKE protocol () based on the Ring Learning with Errors (RLWE) assumption. This integration gives our PAKE protocol resistance to precomputation attacks, similar to OPAQUE. Furthermore, by incorporating thresholding techniques into the PAKE protocol, we mitigate the risk of single points of failure on the server side. Our protocol not only preserves the security guarantees of traditional PAKE schemes but also resists attacks from quantum adversaries. We also provide a comprehensive security analysis and evaluation of, providing valuable insights for its practical implementation.

IEEE Transactions on Consumer Electronics•Sep 18, 2025•0 citations

Quantum-Resistant Cryptography: Evaluating Secure Key Exchange Methods

Mohammed Abdul Nayeem

International Conference on Computing Methodologies and Communication (ICCMC)•Jul 1, 2026•0 citations

A Universally Composable PAKE with Zero Communication Cost

Lawrence Roy, Jiayu Xu

A Password-Authenticated Key Exchange (PAKE) protocol allows two parties to agree upon a cryptographic key, when the only information shared in advance is a low-entropy password. The standard security notion for PAKE (Canetti et al., Eurocrypt 2005) is in the Universally Composable (UC) framework. We show that unlike most UC security notions, UC PAKE does not imply correctness. While Canetti et al. has briefly noticed this issue, we present the first comprehensive study of correctness in UC PAKE: We show that TrivialPAKE, a no-message protocol that does not satisfy correctness, is a UC PAKE; We propose nine approaches to guaranteeing correctness in the UC security notion of PAKE, and show that seven of them are equivalent, whereas the other two are unachievable; We prove that a direct solution, namely changing the UC PAKE functionality to incorporate correctness, is impossible; Finally, we show how to naturally incorporate correctness by changing the model—we view PAKE as a three-party protocol, with the man-in-the-middle adversary as the third party. In this way, we hope to shed some light on the very nature of UC-security in the man-in-the-middle setting.

Lecture notes in computer science•Jan 1, 2023•8 citations

From Public Key Infrastructure to Post-Quantum Cryptography: The SECURED Approach

Vasiliki Diamantopoulou, Κωνσταντίνος Μαλιάτσος, Stefanos Vasileiadis +3 more

•May 20, 2026•0 citations

The Fairy-Ring Dance

Feng Hao, Xun Yi, Liqun Chen +1 more

In this paper, we study Password Authenticated Key Exchange (PAKE) in a group. First, we present a generic "fairy-ring dance" construction that transforms any secure two-party PAKE scheme to a group PAKE protocol while preserving the round efficiency in the optimal way. Based on this generic construction, we present two concrete instantiations based on using SPEKE and J-PAKE as the underlying PAKE primitives respectively. The first protocol, called SPEKE+, accomplishes authenticated key exchange in a group with explicit key confirmation in just two rounds. This is more round-efficient than any existing group PAKE protocols in the literature. The second protocol, called J-PAKE+, requires one more round than SPEKE+, but is computationally faster. Finally, we present full implementations of SPEKE+ and J-PAKE+ with detailed performance measurements. Our experiments suggest that both protocols are feasible for practical applications in which the group size may vary from three to several dozen. This makes them useful, as we believe, for a wide range of applications - e.g., to bootstrap secure communication among a group of smart devices in the Internet of Things (IoT).

•Apr 3, 2015•5 citations
Password authentication is a prevalent method of user verification across the Internet, and its use extends to scenarios where resources are limited. However, current password authentication protocols primarily rely on traditional password authenticated key exchange (PAKE) protocols (e.g., SRP, OPAQUE), which are vulnerable to attacks by quantum adversaries. To date, no efficient quantum algorithm has been found to solve the common challenges in lattice-based cryptography. Therefore, quantum-resistant PAKE protocols are generally built upon lattice-based cryptography. In this work, we propose a threshold verifiable oblivious pseudorandom function () protocol based on secret sharing. We then integrate it into a PAKE protocol and present an instantiation of a quantum-safe threshold PAKE protocol () based on the Ring Learning with Errors (RLWE) assumption. This integration gives our PAKE protocol resistance to precomputation attacks, similar to OPAQUE. Furthermore, by incorporating thresholding techniques into the PAKE protocol, we mitigate the risk of single points of failure on the server side. Our protocol not only preserves the security guarantees of traditional PAKE schemes but also resists attacks from quantum adversaries. We also provide a comprehensive security analysis and evaluation of, providing valuable insights for its practical implementation.
A Password-Authenticated Key Exchange (PAKE) protocol allows two parties to agree upon a cryptographic key, when the only information shared in advance is a low-entropy password. The standard security notion for PAKE (Canetti et al., Eurocrypt 2005) is in the Universally Composable (UC) framework. We show that unlike most UC security notions, UC PAKE does not imply correctness. While Canetti et al. has briefly noticed this issue, we present the first comprehensive study of correctness in UC PAKE: We show that TrivialPAKE, a no-message protocol that does not satisfy correctness, is a UC PAKE; We propose nine approaches to guaranteeing correctness in the UC security notion of PAKE, and show that seven of them are equivalent, whereas the other two are unachievable; We prove that a direct solution, namely changing the UC PAKE functionality to incorporate correctness, is impossible; Finally, we show how to naturally incorporate correctness by changing the model—we view PAKE as a three-party protocol, with the man-in-the-middle adversary as the third party. In this way, we hope to shed some light on the very nature of UC-security in the man-in-the-middle setting.
In this paper, we study Password Authenticated Key Exchange (PAKE) in a group. First, we present a generic "fairy-ring dance" construction that transforms any secure two-party PAKE scheme to a group PAKE protocol while preserving the round efficiency in the optimal way. Based on this generic construction, we present two concrete instantiations based on using SPEKE and J-PAKE as the underlying PAKE primitives respectively. The first protocol, called SPEKE+, accomplishes authenticated key exchange in a group with explicit key confirmation in just two rounds. This is more round-efficient than any existing group PAKE protocols in the literature. The second protocol, called J-PAKE+, requires one more round than SPEKE+, but is computationally faster. Finally, we present full implementations of SPEKE+ and J-PAKE+ with detailed performance measurements. Our experiments suggest that both protocols are feasible for practical applications in which the group size may vary from three to several dozen. This makes them useful, as we believe, for a wide range of applications - e.g., to bootstrap secure communication among a group of smart devices in the Internet of Things (IoT).