Content deleted Content added
m Disambiguating links to File (link changed to Computer file) using DisamAssist. |
m Disambiguating links to TLS (link changed to Transport Layer Security) using DisamAssist. |
||
Line 45:
=== Password-Authenticated Key Exchange ===
For protocols such as [[Transport Layer Security|TLS]], a [[password]] can be used as the basis of a [[key agreement]] protocol, to establish temporary session keys or and mutually authenticate the client and server. In the TLS protocol, this system is called a ''Password-Authenticated Key Exchange'' or [[PAKE]].
But in its most basic implementations, the server learns the user's password during the course of the PAKE authentication. If the server is compromised, this exposes the user's password which can compromise the security of the user.
| |||