Jump to content

Zero-knowledge password proof

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 128.8.131.12 (talk) at 20:43, 26 February 2008. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

A zero-knowledge password proof (ZKPP) refers to a Password-authenticated key agreement protocol that is secure against off-line dictionary attacks. The terminology zero-knowledge password proof is not used in the technical (cryptographic) literature, and is somewhat of a misnomer as it does not have much in common with zero-knowledge_proofs. (Technically speaking, almost all existing password-authenticated key agreement protocols are not zero knowledge.) The terminology ZKPP likely developed based on the intuitive idea that a secure protocol for password-authenticated key agreement works by convincing the server that the client knows the correct password without sending the password to the server.