General Two-Stage Framework

PAKE has a general two-stage framework:

• Key Establishment Protocol
• Key Confirmation Protocol

Key Establishment Protocol

In first stage, the engaging parties will negotiate to produce a session key for their communication. One most common method is Diffie-Hellman Key Exchange, like the first stage of DH-EKE and SPEKE.

Key Confirmation Protocol

In second stage, the engaging parties will authenticate each other.

Challenge–Response Authentication

Hash-Key Authentication