From: Rainer Urian on
Hi,
the new German electronic ID card ("Personalausweis") has a newly developed
crxyptographic protocol called "PACE".
PACE is a elliptic curve Diffie-Hellman with password authentication.
The designers of PACE have now put a security proof on
http://eprint.iacr.org/2009/624

Is anyone interested in analysing/discussing this proof?

--
Rainer

From: Kristian Gj�steen on
Rainer Urian <rainer(a)urian.eu> wrote:
>PACE is a elliptic curve Diffie-Hellman with password authentication.
>The designers of PACE have now put a security proof on
>http://eprint.iacr.org/2009/624
>
>Is anyone interested in analysing/discussing this proof?

I skimmed the paper. The underlying number-theoretic assumptions do not
seem obviously stupid. One might quibble with the ideal cipher model,
but it is probably not unreasonable. The entire thing seems reasonable.

Is there anything in particular you want to discuss?

--
Kristian Gj�steen