%% You should probably cite rfc6628 instead of this I-D. @techreport{shin-augmented-pake-14, number = {draft-shin-augmented-pake-14}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-shin-augmented-pake/14/}, author = {SeongHan Shin and Kazukuni Kobara}, title = {{Efficient Augmented Password-Only Authentication and Key Exchange for IKEv2}}, pagetotal = 20, year = 2012, month = mar, day = 12, abstract = {This document describes an efficient augmented password-only authentication and key exchange (AugPAKE) protocol where a user remembers a low-entropy password and its verifier is registered in the intended server. In general, the user password is chosen from a small set of dictionary whose space is within the off-line dictionary attacks. The AugPAKE protocol described here is secure against passive attacks, active attacks and off-line dictionary attacks (on the obtained messages with passive/active attacks), and also provides resistance to server compromise (in the context of augmented PAKE security). In addition, this document describes how the AugPAKE protocol is integrated into IKEv2.}, }