Dragonfly key exchange
E453435
Dragonfly key exchange is a password-authenticated key exchange (PAKE) protocol designed to provide secure mutual authentication and key establishment resistant to offline dictionary attacks.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Dragonfly key exchange canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4567013 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Dragonfly key exchange Context triple: [Simultaneous Authentication of Equals, basedOn, Dragonfly key exchange]
-
A.
Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
-
B.
Merkle puzzles
Merkle puzzles are an early cryptographic protocol that introduced the concept of public-key exchange by allowing two parties to establish a shared secret over an insecure channel using computationally asymmetric “puzzle” problems.
-
C.
Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
-
D.
Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)" is an IETF standard (RFC 7919) that defines secure, standardized finite-field Diffie-Hellman parameter sets for use in TLS to improve cryptographic security and interoperability.
-
E.
New Directions in Cryptography
New Directions in Cryptography is a landmark 1976 paper that introduced the concepts of public-key cryptography and digital signatures, fundamentally reshaping modern cryptography and secure communications.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Dragonfly key exchange Target entity description: Dragonfly key exchange is a password-authenticated key exchange (PAKE) protocol designed to provide secure mutual authentication and key establishment resistant to offline dictionary attacks.
-
A.
Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
-
B.
Merkle puzzles
Merkle puzzles are an early cryptographic protocol that introduced the concept of public-key exchange by allowing two parties to establish a shared secret over an insecure channel using computationally asymmetric “puzzle” problems.
-
C.
Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
-
D.
Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)" is an IETF standard (RFC 7919) that defines secure, standardized finite-field Diffie-Hellman parameter sets for use in TLS to improve cryptographic security and interoperability.
-
E.
New Directions in Cryptography
New Directions in Cryptography is a landmark 1976 paper that introduced the concepts of public-key cryptography and digital signatures, fundamentally reshaping modern cryptography and secure communications.
- F. None of above. chosen
Statements (44)
| Predicate | Object |
|---|---|
| instanceOf |
cryptographic protocol
ⓘ
key exchange protocol ⓘ password-authenticated key exchange protocol ⓘ |
| comparedTo |
EKE
ⓘ
J-PAKE NERFINISHED ⓘ SRP NERFINISHED ⓘ |
| hasAbbreviation | SAE NERFINISHED ⓘ |
| hasAlternativeName |
Dragonfly PAKE
NERFINISHED
ⓘ
Simultaneous Authentication of Equals NERFINISHED ⓘ |
| hasAuthor | Dan Harkins NERFINISHED ⓘ |
| hasComponent |
commit exchange
ⓘ
confirm exchange ⓘ shared secret derivation ⓘ |
| hasDesignGoal |
forward secrecy
ⓘ
mutual authentication ⓘ password-based key establishment ⓘ resistance to offline dictionary attacks ⓘ |
| hasLimitation |
requires strong password selection for best security
ⓘ
security depends on group parameter selection ⓘ |
| hasProperty |
based on Diffie–Hellman key exchange
ⓘ
does not reveal password to the peer ⓘ does not store password-equivalent data on the server ⓘ mutual authentication between peers ⓘ resistant to offline dictionary attacks ⓘ supports elliptic curve groups ⓘ supports finite field groups ⓘ |
| hasSecurityGoal |
prevention of offline password guessing
ⓘ
protection against active man-in-the-middle attacks ⓘ protection against passive eavesdropping ⓘ |
| hasThreatModel |
adversary capable of active network attacks
ⓘ
adversary with access to protocol transcripts ⓘ |
| hasUsageContext |
infrastructure-less networks
ⓘ
peer-to-peer authentication ⓘ wireless local area networks ⓘ |
| isDefinedIn | RFC 7664 NERFINISHED ⓘ |
| isStandardizedIn | IEEE 802.11 NERFINISHED ⓘ |
| isUsedFor |
Wi‑Fi network authentication
ⓘ
secure key establishment ⓘ |
| isUsedIn |
WPA3
NERFINISHED
ⓘ
WPA3-Personal NERFINISHED ⓘ Wi‑Fi Protected Access 3 NERFINISHED ⓘ |
| usesConcept | password-authenticated key exchange ⓘ |
| usesPrimitive |
elliptic curve cryptography
ⓘ
finite field Diffie–Hellman NERFINISHED ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Dragonfly key exchange Description of subject: Dragonfly key exchange is a password-authenticated key exchange (PAKE) protocol designed to provide secure mutual authentication and key establishment resistant to offline dictionary attacks.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.