{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T16:24:40Z","timestamp":1783614280122,"version":"3.55.0"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2012,12,4]],"date-time":"2012-12-04T00:00:00Z","timestamp":1354579200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cryptol"],"published-print":{"date-parts":[[2013,10]]},"DOI":"10.1007\/s00145-012-9133-6","type":"journal-article","created":{"date-parts":[[2012,12,3]],"date-time":"2012-12-03T18:43:44Z","timestamp":1354560224000},"page":"714-743","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":34,"title":["Round-Optimal Password-Based Authenticated Key Exchange"],"prefix":"10.1007","volume":"26","author":[{"given":"Jonathan","family":"Katz","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vinod","family":"Vaikuntanathan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2012,12,4]]},"reference":[{"key":"9133_CR1","series-title":"LNCS","first-page":"335","volume-title":"Cryptographers\u2019 Track\u2014RSA 2008","author":"M. Abdalla","year":"2008","unstructured":"M. Abdalla, D. Catalano, C. Chevalier, D. Pointcheval, Efficient two-party password-based key exchange protocols in the UC framework, in Cryptographers\u2019 Track\u2014RSA 2008. LNCS, vol. 4964 (Springer, Berlin, 2008), pp. 335\u2013351"},{"issue":"4","key":"9133_CR2","doi-asserted-by":"publisher","first-page":"720","DOI":"10.1007\/s00145-010-9075-9","volume":"24","author":"B. Barak","year":"2011","unstructured":"B. Barak, R. Canetti, Y. Lindell, R. Pass, T. Rabin, Secure computation without authentication. J. Cryptol.\n                  24(4), 720\u2013760 (2011)","journal-title":"J. Cryptol."},{"key":"9133_CR3","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1007\/3-540-45539-6_11","volume-title":"Advances in Cryptology\u2014Eurocrypt 2000","author":"M. Bellare","year":"2000","unstructured":"M. Bellare, D. Pointcheval, P. Rogaway, Authenticated key exchange secure against dictionary attacks, in Advances in Cryptology\u2014Eurocrypt 2000. LNCS, vol. 1807 (Springer, Berlin, 2000), pp. 139\u2013155"},{"key":"9133_CR4","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"232","DOI":"10.1007\/3-540-48329-2_21","volume-title":"Advances in Cryptology\u2014Crypto\u201993","author":"M. Bellare","year":"1994","unstructured":"M. Bellare, P. Rogaway, Entity authentication and key distribution, in Advances in Cryptology\u2014Crypto\u201993. LNCS, vol. 773 (Springer, Berlin, 1994), pp. 232\u2013249"},{"key":"9133_CR5","first-page":"57","volume-title":"27th Annual ACM Symposium on Theory of Computing (STOC)","author":"M. Bellare","year":"1995","unstructured":"M. Bellare, P. Rogaway, Provably secure session key distribution: The three party case, in 27th Annual ACM Symposium on Theory of Computing (STOC) (ACM, New York, 1995), pp. 57\u201366"},{"key":"9133_CR6","first-page":"72","volume-title":"IEEE Symposium on Security & Privacy","author":"S.M. Bellovin","year":"1992","unstructured":"S.M. Bellovin, M. Merritt, Encrypted key exchange: Password-based protocols secure against dictionary attacks, in IEEE Symposium on Security & Privacy (IEEE Press, New York, 1992), pp. 72\u201384"},{"issue":"5","key":"9133_CR7","doi-asserted-by":"publisher","first-page":"679","DOI":"10.1109\/49.223869","volume":"11","author":"R. Bird","year":"1993","unstructured":"R. Bird, I. Gopal, A. Herzberg, P. Janson, S. Kutten, R. Molva, M. Yung, Systematic design of two-party authentication protocols. IEEE J. Sel. Areas Commun.\n                  11(5), 679\u2013693 (1993)","journal-title":"IEEE J. Sel. Areas Commun."},{"issue":"6","key":"9133_CR8","doi-asserted-by":"publisher","first-page":"1084","DOI":"10.1137\/0220068","volume":"20","author":"M. Blum","year":"1991","unstructured":"M. Blum, A.\u00a0De\u00a0Santis, S. Micali, G. Persiano, Noninteractive zero-knowledge. SIAM J. Comput.\n                  20(6), 1084\u20131118 (1991)","journal-title":"SIAM J. Comput."},{"key":"9133_CR9","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"256","DOI":"10.1007\/0-387-34799-2_20","volume-title":"Advances in Cryptology\u2014Crypto\u201988","author":"M. Blum","year":"1990","unstructured":"M. Blum, P. Feldman, S. Micali, Proving security against chosen cyphertext attacks, in Advances in Cryptology\u2014Crypto\u201988. LNCS, vol. 403 (Springer, Berlin, 1990), pp. 256\u2013268"},{"key":"9133_CR10","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-3-540-28628-8_3","volume-title":"Advances in Cryptology\u2014Crypto 2004","author":"D. Boneh","year":"2004","unstructured":"D. Boneh, X. Boyen, H. Shacham, Short group signatures, in Advances in Cryptology\u2014Crypto 2004. LNCS, vol. 3152 (Springer, Berlin, 2004), pp. 41\u201355"},{"key":"9133_CR11","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1007\/11426639_9","volume-title":"Advances in Cryptology\u2014Eurocrypt 2005","author":"X. Boyen","year":"2005","unstructured":"X. Boyen, Y. Dodis, J. Katz, R. Ostrovsky, A. Smith, Secure remote authentication using biometric data, in Advances in Cryptology\u2014Eurocrypt 2005. LNCS, vol. 3494 (Springer, Berlin, 2005), pp. 147\u2013163"},{"key":"9133_CR12","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"156","DOI":"10.1007\/3-540-45539-6_12","volume-title":"Advances in Cryptology\u2014Eurocrypt 2000","author":"V. Boyko","year":"2000","unstructured":"V. Boyko, P.D. MacKenzie, S. Patel, Provably secure password-authenticated key exchange using Diffie\u2013Hellman, in Advances in Cryptology\u2014Eurocrypt 2000. LNCS, vol. 1807 (Springer, Berlin, 2000), pp. 156\u2013171"},{"key":"9133_CR13","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"351","DOI":"10.1007\/978-3-642-01001-9_20","volume-title":"Advances in Cryptology\u2014Eurocrypt 2009","author":"J. Camenisch","year":"2009","unstructured":"J. Camenisch, N. Chandran, V. Shoup, A public key encryption scheme secure against key dependent chosen plaintext and adaptive chosen ciphertext attacks, in Advances in Cryptology\u2014Eurocrypt 2009, ed. by A. Joux. LNCS, vol. 5479 (Springer, Berlin, 2009), pp. 351\u2013368"},{"key":"9133_CR14","first-page":"136","volume-title":"42nd Annual Symposium on Foundations of Computer Science (FOCS)","author":"R. Canetti","year":"2001","unstructured":"R. Canetti, Universally composable security: A new paradigm for cryptographic protocols, in 42nd Annual Symposium on Foundations of Computer Science (FOCS) (IEEE Press, New York, 2001), pp. 136\u2013145. Full version at \n                    http:\/\/eprint.iacr.org\/2000\/067\/"},{"key":"9133_CR15","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"449","DOI":"10.1007\/978-3-642-30057-8_27","volume-title":"Public-Key Cryptography\u2014PKC 2012","author":"R. Canetti","year":"2012","unstructured":"R. Canetti, D. Dachman-Soled, V. Vaikuntanathan, H. Wee, Efficient password authenticated key exchange via oblivious transfer, in Public-Key Cryptography\u2014PKC 2012. LNCS, vol. 7293 (Springer, Berlin, 2012), pp. 449\u2013466"},{"key":"9133_CR16","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"404","DOI":"10.1007\/11426639_24","volume-title":"Advances in Cryptology\u2014Eurocrypt 2005","author":"R. Canetti","year":"2005","unstructured":"R. Canetti, S. Halevi, J. Katz, Y. Lindell, P.D. MacKenzie, Universally composable password-based key exchange, in Advances in Cryptology\u2014Eurocrypt 2005. LNCS, vol. 3494 (Springer, Berlin, 2005), pp. 404\u2013421"},{"key":"9133_CR17","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1007\/3-540-46035-7_4","volume-title":"Advances in Cryptology\u2014Eurocrypt 2002","author":"R. Cramer","year":"2002","unstructured":"R. Cramer, V. Shoup, Universal hash proofs and a paradigm for adaptive chosen ciphertext secure public-key encryption, in Advances in Cryptology\u2014Eurocrypt 2002. LNCS, vol. 2332 (Springer, Berlin, 2002), pp. 45\u201364"},{"key":"9133_CR18","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"566","DOI":"10.1007\/3-540-44647-8_33","volume-title":"Advances in Cryptology\u2014Crypto 2001","author":"A. Santis De","year":"2001","unstructured":"A.\u00a0De\u00a0Santis, G.\u00a0Di\u00a0Crescenzo, R. Ostrovsky, G. Persiano, A. Sahai, Robust non-interactive zero knowledge, in Advances in Cryptology\u2014Crypto 2001. LNCS, vol. 2139 (Springer, Berlin, 2001), pp. 566\u2013598"},{"issue":"6","key":"9133_CR19","doi-asserted-by":"publisher","first-page":"644","DOI":"10.1109\/TIT.1976.1055638","volume":"22","author":"W. Diffie","year":"1976","unstructured":"W. Diffie, M.E. Hellman, New directions in cryptography. IEEE Trans. Inf. Theory\n                  22(6), 644\u2013654 (1976)","journal-title":"IEEE Trans. Inf. Theory"},{"issue":"1","key":"9133_CR20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1137\/S0097539792230010","volume":"29","author":"U. Feige","year":"1999","unstructured":"U. Feige, D. Lapidot, A. Shamir, Multiple non-interactive zero knowledge proofs under general assumptions. SIAM J. Comput.\n                  29(1), 1\u201328 (1999)","journal-title":"SIAM J. Comput."},{"key":"9133_CR21","series-title":"LNCS","first-page":"589","volume-title":"5th Theory of Cryptography Conference\u2014TCC 2008","author":"R. Gennaro","year":"2008","unstructured":"R. Gennaro, Faster and shorter password-authenticated key exchange, in 5th Theory of Cryptography Conference\u2014TCC 2008. LNCS, vol. 4948 (Springer, Berlin, 2008), pp. 589\u2013606"},{"issue":"2","key":"9133_CR22","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1145\/1151414.1151418","volume":"9","author":"R. Gennaro","year":"2006","unstructured":"R. Gennaro, Y. Lindell, A framework for password-based authenticated key exchange. ACM Trans. Inf. Syst. Secur.\n                  9(2), 181\u2013234 (2006)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"issue":"3","key":"9133_CR23","doi-asserted-by":"publisher","first-page":"241","DOI":"10.1007\/s00145-006-0233-z","volume":"19","author":"O. Goldreich","year":"2006","unstructured":"O. Goldreich, Y. Lindell, Session-key generation using human passwords only. J. Cryptol.\n                  19(3), 241\u2013340 (2006)","journal-title":"J. Cryptol."},{"issue":"5","key":"9133_CR24","doi-asserted-by":"publisher","first-page":"648","DOI":"10.1109\/49.223865","volume":"11","author":"L. Gong","year":"1993","unstructured":"L. Gong, T.M.A. Lomas, R.M. Needham, J.H. Saltzer, Protecting poorly chosen secrets from guessing attacks. IEEE J. Sel. Areas Commun.\n                  11(5), 648\u2013656 (1993)","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"9133_CR25","volume-title":"53rd Annual Symposium on Foundations of Computer Science (FOCS)","author":"V. Goyal","year":"2012","unstructured":"V. Goyal, Positive results for concurrently secure computation in the plain model, in 53rd Annual Symposium on Foundations of Computer Science (FOCS) (IEEE Press, New York, 2012)"},{"key":"9133_CR26","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"277","DOI":"10.1007\/978-3-642-14623-7_15","volume-title":"Advances in Cryptology\u2014Crypto 2010","author":"V. Goyal","year":"2010","unstructured":"V. Goyal, A. Jain, R. Ostrovsky, Password-authenticated session-key generation on the Internet in the plain model, in Advances in Cryptology\u2014Crypto 2010. LNCS, vol. 6223 (Springer, Berlin, 2010), pp. 277\u2013294"},{"key":"9133_CR27","first-page":"516","volume-title":"17th ACM Conf. on Computer and Communications Security (CCS)","author":"A. Groce","year":"2010","unstructured":"A. Groce, J. Katz, A new framework for efficient password-based authenticated key exchange, in 17th ACM Conf. on Computer and Communications Security (CCS) (ACM, New York, 2010), pp. 516\u2013525"},{"key":"9133_CR28","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"415","DOI":"10.1007\/978-3-540-78967-3_24","volume-title":"Advances in Cryptology\u2014Eurocrypt 2008","author":"J. Groth","year":"2008","unstructured":"J. Groth, A. Sahai, Efficient non-interactive proof systems for bilinear groups, in Advances in Cryptology\u2014Eurocrypt 2008. LNCS, vol. 4965 (Springer, Berlin, 2008), pp. 415\u2013432"},{"issue":"3","key":"9133_CR29","doi-asserted-by":"publisher","first-page":"230","DOI":"10.1145\/322510.322514","volume":"2","author":"S. Halevi","year":"1999","unstructured":"S. Halevi, H. Krawczyk, Public-key cryptography and password protocols. ACM Trans. Inf. Syst. Secur.\n                  2(3), 230\u2013268 (1999)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"9133_CR30","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"553","DOI":"10.1007\/978-3-540-74143-5_31","volume-title":"Advances in Cryptology\u2014Crypto 2007","author":"D. Hofheinz","year":"2007","unstructured":"D. Hofheinz, E. Kiltz, Secure hybrid encryption from weakened key encapsulation, in Advances in Cryptology\u2014Crypto 2007. LNCS, vol. 4622 (Springer, Berlin, 2007), pp. 553\u2013571"},{"key":"9133_CR31","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1007\/978-3-540-24852-1_16","volume-title":"2nd Intl. Conference on Applied Cryptography and Network Security (ACNS)","author":"I.R. Jeong","year":"2004","unstructured":"I.R. Jeong, J. Katz, D.H. Lee, One-round protocols for two-party authenticated key exchange, in 2nd Intl. Conference on Applied Cryptography and Network Security (ACNS). LNCS, vol. 3089 (Springer, Berlin, 2004), pp. 220\u2013232"},{"key":"9133_CR32","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1007\/978-3-540-30564-4_19","volume-title":"11th Annual International Workshop on Selected Areas in Cryptography (SAC)","author":"S. Jiang","year":"2004","unstructured":"S. Jiang, G. Gong, Password based key exchange with mutual authentication, in 11th Annual International Workshop on Selected Areas in Cryptography (SAC). LNCS, vol. 3357 (Springer, Berlin, 2004), pp. 267\u2013279"},{"issue":"2","key":"9133_CR33","doi-asserted-by":"publisher","first-page":"651","DOI":"10.1016\/j.jcss.2011.09.005","volume":"78","author":"J. Katz","year":"2012","unstructured":"J. Katz, P.D. MacKenzie, G. Taban, V.D. Gligor, Two-server password-only authenticated key exchange. J. Comput. Syst. Sci. Int.\n                  78(2), 651\u2013669 (2012)","journal-title":"J. Comput. Syst. Sci. Int."},{"issue":"1","key":"9133_CR34","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1145\/1613676.1613679","volume":"57","author":"J. Katz","year":"2009","unstructured":"J. Katz, R. Ostrovsky, M. Yung, Efficient and secure authenticated key exchange using weak passwords. J. ACM\n                  57(1), 78\u2013116 (2009)","journal-title":"J. ACM"},{"key":"9133_CR35","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"636","DOI":"10.1007\/978-3-642-10366-7_37","volume-title":"Advances in Cryptology\u2014Asiacrypt 2009","author":"J. Katz","year":"2009","unstructured":"J. Katz, V. Vaikuntanathan, Smooth projective hashing and password-based authenticated key exchange from lattices, in Advances in Cryptology\u2014Asiacrypt 2009. LNCS, vol. 5912 (Springer, Berlin, 2009), pp. 636\u2013652"},{"key":"9133_CR36","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"599","DOI":"10.1007\/3-540-44448-3_46","volume-title":"Advances in Cryptology\u2014Asiacrypt 2000","author":"P.D. MacKenzie","year":"2000","unstructured":"P.D. MacKenzie, S. Patel, R. Swaminathan, Password-authenticated key exchange based on RSA, in Advances in Cryptology\u2014Asiacrypt 2000. LNCS, vol. 1976 (Springer, Berlin, 2000), pp. 599\u2013613"},{"key":"9133_CR37","first-page":"427","volume-title":"22nd Annual ACM Symposium on Theory of Computing (STOC)","author":"M. Naor","year":"1990","unstructured":"M. Naor, M. Yung, Public-key cryptosystems provably secure against chosen ciphertext attacks, in 22nd Annual ACM Symposium on Theory of Computing (STOC) (ACM, New York, 1990), pp. 427\u2013437"},{"issue":"1","key":"9133_CR38","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1007\/s00145-007-9008-4","volume":"21","author":"M.-H. Nguyen","year":"2008","unstructured":"M.-H. Nguyen, S. Vadhan, Simpler session-key generation from short random passwords. J. Cryptol.\n                  21(1), 52\u201396 (2008)","journal-title":"J. Cryptol."},{"key":"9133_CR39","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"474","DOI":"10.1007\/978-3-540-76900-2_29","volume-title":"Advances in Cryptology\u2014Asiacrypt 2007","author":"T. Okamoto","year":"2007","unstructured":"T. Okamoto, Authenticated key exchange and key encapsulation in the standard model, in Advances in Cryptology\u2014Asiacrypt 2007. LNCS, vol. 4833 (Springer, Berlin, 2007), pp. 474\u2013484"},{"key":"9133_CR40","first-page":"543","volume-title":"40th Annual Symposium on Foundations of Computer Science (FOCS)","author":"A. Sahai","year":"1999","unstructured":"A. Sahai, Non-malleable non-interactive zero knowledge and adaptive chosen-ciphertext security, in 40th Annual Symposium on Foundations of Computer Science (FOCS) (IEEE Press, New York, 1999), pp. 543\u2013553"},{"key":"9133_CR41","unstructured":"H. Shacham, A Cramer-Shoup encryption scheme from the linear assumption and from progressively weaker linear variants. Cryptology ePrint archive, report 2007\/074"}],"container-title":["Journal of Cryptology"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-012-9133-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00145-012-9133-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-012-9133-6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-012-9133-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,4,8]],"date-time":"2020-04-08T08:09:34Z","timestamp":1586333374000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00145-012-9133-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,12,4]]},"references-count":41,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2013,10]]}},"alternative-id":["9133"],"URL":"https:\/\/doi.org\/10.1007\/s00145-012-9133-6","relation":{},"ISSN":["0933-2790","1432-1378"],"issn-type":[{"value":"0933-2790","type":"print"},{"value":"1432-1378","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,12,4]]},"assertion":[{"value":"6 January 2012","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 December 2012","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}