3 ms·
> When the peer is found, its public key is checked against the three remaining words (as the words were derived from that key), and a password authenticated ke
by mintplant 6y ago
> When the peer is found, its public key is checked against the three remaining words (as the words were derived from that key), and a password authenticated key exchange happens to authenticate each other.
What's the PAKE used for, if the public key is already verified? What's the "password" here?
- dennis-tra 6y agoThe Public-Key verification was intended as an additional sanity check and I considered it not secure enough to just rely on it alone - so I added the PAKE step as well. As lotharrr mentioned other flaws, you may want to check out his suggestion which seems like the way to go for me. This to eliminates this "sanity check" step all together.