Auditable PAKEs: Approaching fair exchange without a TTP (Transcript of discussion)

Abstract

This is some work I did last year with Bill Roscoe. I was on sabbatical so it’s a kind of “What I did on my sabbatical” talk. I guess it fits with what seems to be an emerging theme in these sessions of the detection of attacks. I should perhaps explain that the use of term emphauditable was I think coined by Bill, to indicate the design of a protocols in such a way that legitimate parties can detect when they’re under attack. That I hope will become clear in a moment.