Patent ID: 8464058
Filing Date: 2013-06-11
Classification: H04L

Abstract:
1. A cryptographic method effected between first and second parties acting through respective computing entities, the first party having a specified identity, a secret password, and a long-term password-based public key that is dependent on at least said password and a master secret of the second party; the method comprising: the first party generating a short-term random secret x, and then computing and supplying to the second party, a short-term password-based public key that requires for its computation direct knowledge of the first party's password and secret x; the second party transforming the short-term password-based public key into an element X, complementary to x but from which recovery of x is computationally infeasible, by using its master secret and at least a first-party-specific constituent of the first party's long-term password-based public key that is associated with the specified identity of the first party; and using the secret x and element X to provide matching keys for the parties.