refs.bib

@misc{aucpace,
      author = {Björn Haase and Benoît Labrique},
      title = {AuCPace: Efficient verifier-based PAKE protocol tailored for the IIoT},
      howpublished = {Cryptology ePrint Archive, Paper 2018/286},
      year = {2018},
      url = {https://eprint.iacr.org/2018/286}
}

@misc{chip+crisp,
      author = {Cas Cremers and Moni Naor and Shahar Paz and Eyal Ronen},
      title = {CHIP and CRISP:  Protecting All Parties Against Compromise through Identity-Binding PAKEs},
      howpublished = {Cryptology ePrint Archive, Paper 2020/529},
      year = {2020},
      url = {https://eprint.iacr.org/2020/529}
}

@misc{khape,
      author = {Yanqi Gu and Stanislaw Jarecki and Hugo Krawczyk},
      title = {KHAPE: Asymmetric PAKE from Key-Hiding Key Exchange},
      howpublished = {Cryptology ePrint Archive, Paper 2021/873},
      year = {2021},
      url = {https://eprint.iacr.org/2021/873}
}

@misc{decaf,
      author = {Mike Hamburg},
      title = {Decaf: Eliminating cofactors through point compression},
      howpublished = {Cryptology ePrint Archive, Paper 2015/673},
      year = {2015},
      url = {https://eprint.iacr.org/2015/673}
}

@misc{opaque,
      author = {Stanislaw Jarecki and Hugo Krawczyk and Jiayu Xu},
      title = {OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks},
      howpublished = {Cryptology ePrint Archive, Paper 2018/163},
      year = {2018},
      url = {https://eprint.iacr.org/2018/163}
}

@misc{montgom-ladder,
      author = {Daniel J.  Bernstein and Tanja Lange},
      title = {Montgomery curves and the Montgomery ladder},
      howpublished = {Cryptology ePrint Archive, Paper 2017/293},
      year = {2017},
      url = {https://eprint.iacr.org/2017/293}
}

@misc{eke,
      title = {Encrypted key exchange: Password-based protocols secure against dictionary attacks},
      author = {Bellovin, Steven Michael and Merritt, Michael},
      publisher = {Columbia University},
      month = {5},
      year = {1992}
}

@InProceedings{spake,
      author = "Abdalla, Michel and Pointcheval, David",
      editor = "Menezes, Alfred",
      title = "Simple Password-Based Encrypted Key Exchange Protocols",
      booktitle = "Topics in Cryptology -- CT-RSA 2005",
      year = "2005",
      publisher = "Springer Berlin Heidelberg",
      address = "Berlin, Heidelberg",
      pages = "191--208",
      isbn = "978-3-540-30574-3"
}

@InProceedings{ecc-first-use-miller,
      author = "Miller, Victor S.",
      editor = "Williams, Hugh C.",
      title = "Use of Elliptic Curves in Cryptography",
      booktitle = "Advances in Cryptology --- CRYPTO '85 Proceedings",
      year = "1986",
      publisher = "Springer Berlin Heidelberg",
      address = "Berlin, Heidelberg",
      pages = "417--426",
      isbn = "978-3-540-39799-1"
}

@article{ecc-first-use-koblitz,
      title = {Elliptic curve cryptosystems},
      author = {Koblitz, Neal},
      journal = {Mathematics of computation},
      volume = {48},
      number = {177},
      pages = {203--209},
      year = {1987}
}

@article{state-of-ecc,
      title = {The state of elliptic curve cryptography},
      author = {Koblitz, Neal and Menezes, Alfred and Vanstone, Scott},
      journal = {Designs, codes and cryptography},
      volume = {19},
      pages = {173--193},
      year = {2000},
      publisher = {Springer}
}

@misc{pake-blog,
      url = {https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/},
      note = {Accessed 3rd April, 2023},
      title = {Let's talk about PAKE},
      author = {Green, Matthew},
      year = {2018},
      month = {10}
}

@misc{srp-blog,
      url = {https://blog.cryptographyengineering.com/should-you-use-srp/},
      note = {Accessed 3rd April, 2023},
      title = {Should you use SRP?},
      author = {Green, Matthew},
      year = {2018},
}

@misc{apple-keychain-srp,
      url = {https://support.apple.com/en-gb/guide/security/sec3e341e75d/web},
      note = {Accessed 3rd April, 2023},
      title = {Escrow security for iCloud Keychain},
      author = {Apple Platform Security},
      year = {2021},
      month = {5},
}

@techreport{srp,
      author = {Wu, Tom},
      title = {The SRP Authentication and Key Exchange System},
      howpublished = {Internet Requests for Comments},
      type = {RFC},
      number = 2945,
      year = {2000},
      month = {9},
      publisher = {RFC Editor},
      institution = {RFC Editor},
      url = {https://www.rfc-editor.org/rfc/rfc2945.txt},
}

@techreport{tls-srp,
      author = {T. Wu and D. Taylor and N. Mavrogiannopoulos and T. Perrin},
      title = {Using the Secure Remote Password (SRP) Protocol for TLS Authentication},
      howpublished = {Internet Requests for Comments},
      type = {RFC},
      number = 5054,
      year = {2007},
      month = {11},
      publisher = {RFC Editor},
      institution = {RFC Editor},
      url = {https://www.rfc-editor.org/rfc/rfc5054.txt},
}

@techreport{eap,
      author = {John Vollbrecht and James D. Carlson and Larry Blunk and Dr. Bernard D. Aboba and Henrik Levkowetz},
      title = {Extensible Authentication Protocol (EAP)},
      howpublished = {Internet Requests for Comments},
      type = {rfc},
      number = 3748,
      year = {2004},
      month = {6},
      publisher = {RFC Editor},
      institution = {RFC Editor},
      url = {https://www.rfc-editor.org/rfc/rfc3748.txt},
}

@techreport{eap-eke,
      author = {Y. Sheffer and G. Zorn and H. Tschofenig and S. Fluhrer},
      title = {An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol},
      howpublished = {Internet Requests for Comments},
      type = {rfc},
      number = 6124,
      year = {2011},
      month = {2},
      publisher = {RFC Editor},
      institution = {RFC Editor},
      url = {https://www.rfc-editor.org/rfc/rfc6124.txt},
}

@techreport{nist-ecc-reqs,
      author = {National Institute of Standards and Technology},
      title = {Recommendation for Key Management: Part 1 – General},
      institution = {U.S. Department of Commerce},
      address = {Washington, D.C.},
      DOI = {10.6028/NIST.SP.800-57pt1r5},
      number = {NIST Special Publication (SP) 800-57, Part 1, Rev. 5},
      year = {2020},
}

@misc{tikz-crypto,
      author = {J\'er\'emy Jean},
      title = {{TikZ for Cryptographers}},
      howpublished = {\url{https://www.iacr.org/authors/tikz/}},
      year = {2016},
}

@inproceedings{elligator2,
      title = {Elligator: elliptic-curve points indistinguishable from uniform random strings},
      author = {Bernstein, Daniel J and Hamburg, Mike and Krasnova, Anna and Lange, Tanja},
      booktitle = {Proceedings of the 2013 ACM SIGSAC conference on Computer \& communications security},
      pages = {967--980},
      year = {2013}
}

@inproceedings{completeness-attack,
      title = {Exceptional procedure attack on elliptic curve cryptosystems},
      author = {Izu, Tetsuya and Takagi, Tsuyoshi},
      booktitle = {Public Key Cryptography—PKC 2003: 6th International Workshop on Practice and Theory in Public Key Cryptography Miami, FL, USA, January 6--8, 2003 Proceedings 6},
      pages = {224--239},
      year = {2002},
      organization = {Springer}
}

@inproceedings{small-subgroup-attack,
      title = {A key recovery attack on discrete log-based schemes using a prime order subgroup},
      author = {Lim, Chae Hoon and Lee, Pil Joong},
      booktitle = {Advances in Cryptology--CRYPTO'97: 17th Annual International Cryptology Conference Santa Barbara, California, USA August 17--21, 1997 Proceedings 17},
      pages = {249--263},
      year = {1997},
      organization = {Springer}
}

@inproceedings{invalid-curve-attack,
      title = {Differential fault attacks on elliptic curve cryptosystems},
      author = {Biehl, Ingrid and Meyer, Bernd and M{\"u}ller, Volker},
      booktitle = {Advances in Cryptology—CRYPTO 2000: 20th Annual International Cryptology Conference Santa Barbara, California, USA, August 20--24, 2000 Proceedings 20},
      pages = {131--146},
      year = {2000},
      organization = {Springer}
}

@misc{safecurves,
      title = {SafeCurves: choosing safe curves for elliptic-curve cryptography.},
      author = {Daniel J. Bernstein and Tanja Lange.},
      url = {https://safecurves.cr.yp.to},
      note = {Accessed 3rd April 2023}
}

@inproceedings{curve-rigidity,
      title = {Security dangers of the NIST curves},
      author = {Bernstein, Daniel J and Lange, Tanja},
      booktitle = {Invited talk, International State of the Art Cryptography Workshop, Athens, Greece},
      year = {2013}
}

@inproceedings{multiplicative-transfer-attack,
      title = {Reducing elliptic curve logarithms to logarithms in a finite field},
      author = {Menezes, Alfred and Vanstone, Scott and Okamoto, Tatsuaki},
      booktitle = {Proceedings of the twenty-third annual ACM symposium on Theory of computing},
      pages = {80--89},
      year = {1991}
}

@article{additive-transfer-attack,
      title = {Evaluation of discrete logarithms in a group of $\rho$-torsion points of an elliptic curve in characteristic $\rho$},
      author = {Semaev, Igor},
      journal = {Mathematics of computation},
      volume = {67},
      number = {221},
      pages = {353--356},
      year = {1998}
}

@article{pollard-rho,
      title = {Monte Carlo methods for index computation ($\mod p$)},
      author = {Pollard, John M},
      journal = {Mathematics of computation},
      volume = {32},
      number = {143},
      pages = {918--924},
      year = {1978}
}

@misc{cfrg-pake-selection-results,
      title = {Results of the PAKE selection process},
      author = {CFRG Chairs},
      url = {https://datatracker.ietf.org/meeting/interim-2020-cfrg-01/materials/slides-interim-2020-cfrg-01-sessa-results-of-the-pake-selection-process-00},
      month = {4},
      year = {2020}
}

@inproceedings{sae,
      title = {Simultaneous authentication of equals: A secure, password-based key exchange for mesh networks},
      author = {Harkins, Dan},
      booktitle = {2008 Second International Conference on Sensor Technologies and Applications (sensorcomm 2008)},
      pages = {839--844},
      year = {2008},
      organization = {IEEE}
}

@inproceedings{hmqv,
      title = {HMQV: A high-performance secure Diffie-Hellman protocol},
      author = {Krawczyk, Hugo},
      booktitle = {Crypto},
      volume = {3621},
      pages = {546--566},
      year = {2005},
      organization = {Springer}
}

@techreport{fips-140-2,
      author = {National Institute of Standards and Technology},
      title = {Security Requirements for Cryptographic Modules},
      institution = {U.S. Department of Commerce},
      address = {Washington, D.C.},
      number = {Federal Information Processing Standards Publications (FIPS PUBS) 140-2, Change Notice 2 December 03, 2002},
      DOI = {10.6028/NIST.FIPS.140-2},
      year = {2020},
}

@techreport{nist-safer-languages,
      author = {National Institute of Standards and Technology},
      title = {Safer Languages},
      institution = {U.S. Department of Commerce},
      address = {Washington, D.C.},
      number = {(TR) 24772 Guidance to avoiding vulnerabilities in programming languages},
      url = {https://www.nist.gov/itl/ssd/software-quality-group/safer-languages},
      year = {2023},
}

@techreport{scrypt,
      author = {Percival, Colin},
      title = {The scrypt Password-Based Key Derivation Function},
      howpublished = {Internet Requests for Comments},
      type = {RFC},
      number = 7914,
      year = {2016},
      month = {8},
      publisher = {RFC Editor},
      institution = {RFC Editor},
      url = {https://www.rfc-editor.org/rfc/rfc7914.txt},
}

@inproceedings{scrypt-max-mem-hard,
  title={Scrypt is maximally memory-hard},
  author={Alwen, Jo{\"e}l and Chen, Binyi and Pietrzak, Krzysztof and Reyzin, Leonid and Tessaro, Stefano},
  booktitle={Advances in Cryptology--EUROCRYPT 2017: 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Paris, France, April 30--May 4, 2017, Proceedings, Part III},
  pages={33--62},
  year={2017},
  organization={Springer}
}

@inproceedings{curve25519,
  title={Curve25519: new Diffie-Hellman speed records},
  author={Bernstein, Daniel J},
  booktitle={Public Key Cryptography-PKC 2006: 9th International Conference on Theory and Practice in Public-Key Cryptography, New York, NY, USA, April 24-26, 2006. Proceedings 9},
  pages={207--228},
  year={2006},
  organization={Springer}
}

@techreport{ristretto255,
  title={The ristretto255 group},
  author={de Valence, Henry and Grigg, Jack and Tankersley, George and Valsorda, Filippo and Lovecruft, Isis},
  year={2019},
  institution={IETF CFRG Internet Draft}
}

@InProceedings{swu-map,
      author={Shallue, Andrew and van de Woestijne, Christiaan E.},
      editor={Hess, Florian and Pauli, Sebastian and Pohst, Michael},
      title={Construction of Rational Points on Elliptic Curves over Finite Fields},
      booktitle={Algorithmic Number Theory},
      year={2006},
      publisher={Springer Berlin Heidelberg},
      address={Berlin, Heidelberg},
      pages={510--524},
      abstract={We give a deterministic polynomial-time algorithm that computes a nontrivial rational point on an elliptic curve over a finite field, given a Weierstrass equation for the curve. For this, we reduce the problem to the task of finding a rational point on a curve of genus zero.},
      isbn={978-3-540-36076-6}
}

@InProceedings{sswu-map,
      author="Brier, Eric and Coron, Jean-S{\'e}bastien and Icart, Thomas and Madore, David and Randriam, Hugues and Tibouchi, Mehdi",
      editor="Rabin, Tal",
      title="Efficient Indifferentiable Hashing into Ordinary Elliptic Curves",
      booktitle="Advances in Cryptology -- CRYPTO 2010",
      year="2010",
      publisher="Springer Berlin Heidelberg",
      address="Berlin, Heidelberg",
      pages="237--254",
      abstract="We provide the first construction of a hash function into ordinary elliptic curves that is indifferentiable from a random oracle, based on Icart's deterministic encoding from Crypto 2009. While almost as efficient as Icart's encoding, this hash function can be plugged into any cryptosystem that requires hashing into elliptic curves, while not compromising proofs of security in the random oracle model.",
      isbn="978-3-642-14623-7"
}

@misc{osswu-map,
      author = {Riad S.  Wahby and Dan Boneh},
      title = {Fast and simple constant-time hashing to the BLS12-381 elliptic curve},
      howpublished = {Cryptology ePrint Archive, Paper 2019/403},
      year = {2019},
      doi = {10.13154/tches.v2019.i4.154-179},
      url = {https://eprint.iacr.org/2019/403}
}

@misc{quantum-annoying,
      author = {Edward Eaton and Douglas Stebila},
      title = {The ``quantum annoying'' property of password-authenticated key exchange protocols},
      howpublished = {Cryptology ePrint Archive, Paper 2021/696},
      year = {2021},
      url = {https://eprint.iacr.org/2021/696}
}

@misc{break-sidh,
      author = {Wouter Castryck and Thomas Decru},
      title = {An efficient key recovery attack on SIDH},
      howpublished = {Cryptology ePrint Archive, Paper 2022/975},
      year = {2022},
      url = {https://eprint.iacr.org/2022/975}
}

@misc{whatsapp-are-dumb-too,
      title = {Public Report – WhatsApp opaque-ke Cryptographic Implementation Review},
      author = {Jennifer Fernick},
      url = {https://research.nccgroup.com/2021/12/13/public-report-whatsapp-opaque-ke-cryptographic-implementation-review/},
      year = {2021},
      month = {12},
      note = {Accessed 11th April 2023}
}

@misc{whatsapp-are-dumb-too-report,
      title = {Security Assessment - opaque-ke},
      author = {Ava Howell and Kevin Henry},
      url = {https://research.nccgroup.com/wp-content/uploads/2021/12/NCC\_Group\_WhatsAppLLC\_OPAQUE\_Report\_2021-12-10\_v1.3.pdf},
      year = {2021},
      month = {12},
      note = {Accessed 11th April 2023}
}

@misc{ietf-aucpace,
      title = {(strong) AuCPace, an augmented PAKE},
      author = {Björn Haase},
      url = {https://datatracker.ietf.org/doc/draft-haase-aucpace/07/},
      month = {1},
      year = {2023}
}

@misc{java-psychic-signatures,
      title = {CVE-2022-21449},
      author = {MITRE},
      url = {https://nvd.nist.gov/vuln/detail/CVE-2022-21449},
      month = {5},
      year = {2022}
}

@misc{latke,
      author = {Michael Rosenberg},
      title = {LATKE: An identity-binding PAKE from lattice assumptions},
      howpublished = {Cryptology ePrint Archive, Paper 2023/324},
      year = {2023},
      url = {https://eprint.iacr.org/2023/324}
}