Re: [9fans] dp9ik draft

Robert Ransom pointed out offlist that the pak crypto is flawed in this draft so its back to the drawing board. please consider this version of the draft retracted :-) > If an attacker can find scalars s1 and s2 such that s1*H(p1) = > s2*H(p2), then he can send s1*H(p1) as his public key, receive

Re: [9fans] dp9ik draft

sorry, typoed the url: http://felloff.net/usr/cinap_lenrek/newticket.txt -- cinap