@techreport{schmidt-pake-tls-00, number = {draft-schmidt-pake-tls-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-schmidt-pake-tls/00/}, author = {Dennis Kuegler and Joern-Marc Schmidt}, title = {{Using Password-Authenticated Key Agreement (PAKE) schemes in TLS}}, pagetotal = 14, year = 2015, month = oct, day = 19, abstract = {This document describes how to integrate Password-Authenticated Key Agreement (PAKE) schemes into TLS. These schemes enable two parties who share a potentially weak password to derive a common cryptographic key, allowing them to establish a secure channel. The current document defines a generic way to integrate PAKE schemes into TLS. In addition, it demonstrates how to use the well-known Password Authenticated Connection Establishment (PACE) scheme in TLS as an example for the generic construction.}, }