Dragonfly Key Exchange
Open accessAbstract
This document specifies a key exchange using discrete logarithm cryptography that is authenticated using a password or passphrase.It is resistant to active attack, passive attack, and offline dictionary attack.This document is a product of the Crypto Forum Research Group (CFRG). Status of This MemoThis document is not an Internet Standards Track specification; it is published for informational purposes.This document is a product of the Internet Research Task Force (IRTF).The IRTF publishes the results of Internet-related research and development activities.These results might not be suitable for deployment.This RFC represents the individual opinion(s) of one or more members of the Crypto Forum Research Group of the Internet Research Task Force (IRTF).Documents approved for publication by the IRSG are not a candidate for any level of Internet Standard; see Section 2 of RFC 5741.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Bellare, M., & Rogaway, P. (1993) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/168588.168596 · Cited by 4,695 · see citing works
Key words for use in RFCs to Indicate Requirement Levels
Bradner, S. O. (1997) · doi:10.17487/rfc2119 · Cited by 3,001 · see citing works
Internet Key Exchange Protocol Version 2 (IKEv2)
Kaufman, C., Hoffman, P., Nir, Y., Eronen, P., & Kivinen, T. (2014) · doi:10.17487/rfc7296 · Cited by 340 · see citing works
Digital signature standard (DSS)
National Institute of Standards and Technology (US) (2013) · doi:10.6028/nist.fips.186-4 · Cited by 246 · see citing works
Efficient Indifferentiable Hashing into Ordinary Elliptic Curves
Brier, É., Coron, J.-S., Icart, T., Madore, D., Randriambololona, H., & Tibouchi, M. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-14623-7_13 · Cited by 113 · see citing works
Recommendation for key derivation using pseudorandom functions
Chen, L. (2022) · doi:10.6028/nist.sp.800-108r1 · Cited by 82 · see citing works
Fundamental Elliptic Curve Cryptography Algorithms
McGrew, D., Igoe, K., & Salter, M. (2011) · doi:10.17487/rfc6090 · Cited by 75 · see citing works
Cryptanalysis of the dragonfly key exchange protocol
Clarke, D., & Hao, F. (2014) · IET Information Security · doi:10.1049/iet-ifs.2013.0081 · Cited by 25 · see citing works
Extensible Authentication Protocol - Generalized Pre-Shared Key (EAP-GPSK) Method
Clancy, T. C., & Tschofenig, H. (2009) · doi:10.17487/rfc5433 · Cited by 22 · see citing works
On the Provable Security of the Dragonfly Protocol
Lancrenon, J., & Škrobot, M. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-23318-5_14 · Cited by 15 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Dragonblood: Analyzing the Dragonfly Handshake of WPA3 and EAP-pwd
Vanhoef, M., & Ronen, E. (2020) · 2020 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp40000.2020.00031 · Cited by 179 · see citing works
Evolution of Wi-Fi Protected Access: Security Challenges
Kwon, S., & Choi, H.-K. (2020) · IEEE Consumer Electronics Magazine · doi:10.1109/mce.2020.3010778 · Cited by 19 · see citing works
Dragonblood is Still Leaking: Practical Cache-based Side-Channel in the Wild
Braga, D. D. A., Fouque, P.-A., & Sabt, M. (2020) · Annual Computer Security Applications Conference · doi:10.1145/3427228.3427295 · Cited by 19 · see citing works
Dragonblood: A Security Analysis of WPA3's SAE Handshake.
Vanhoef, M., & Ronen, E. (2019) · Lirias (KU Leuven) · Cited by 17 · see citing works
On the Provable Security of the Dragonfly Protocol
Lancrenon, J., & Škrobot, M. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-23318-5_14 · Cited by 15 · see citing works
EKE Meets Tight Security in the Universally Composable Framework
Liu, X., Liu, S., Han, S., & Gu, D. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-31368-4_24 · Cited by 10 · see citing works
Provably Secure Asymmetric PAKE Protocol for Protecting IoT Access
Qi, M., & Hu, W. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3314209 · Cited by 10 · see citing works
Quantum Computers: The Need for a New Cryptographic Strategy
Hale, B., Bindel, N., & Bossuyt, D. L. V. (2023) · Springer optimization and its applications · doi:10.1007/978-3-031-39542-0_7 · Cited by 8 · see citing works
A Chosen Random Value Attack on WPA3 SAE Authentication Protocol
Sun, S. (2021) · Digital Threats Research and Practice · doi:10.1145/3468526 · Cited by 6 · see citing works
On Composability of Game-Based Password Authenticated Key Exchange
Škrobot, M., & Lancrenon, J. (2018) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp.2018.00038 · Cited by 6 · see citing works
An Enhanced Dragonfly Key Exchange Protocol against Offline Dictionary Attack
Alharbi, E., Alsulami, N., & Batarfi, O. (2015) · Journal of Information Security · doi:10.4236/jis.2015.62008 · Cited by 5 · see citing works
SAE+: One-Round Provably Secure Asymmetric SAE Protocol for Client-Server Model
Qi, M., Hu, W., & Tai, Y. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3372799 · Cited by 4 · see citing works
Integrate Dragonfly Key Exchange (IETF - RFC 7664) into Arithmetic Circuit Homomorphic Encryption
Tan, L., Wee, J. W. S., Chan, J. R., Soh, W. J., & Yap, C. N. (2019) · IEEE Pacific Rim International Symposium on Dependable Computing (PRDC) · doi:10.1109/prdc47002.2019.00030 · Cited by 4 · see citing works
Braga, D. D. A., Kulatova, N., Sabt, M., Fouque, P.-A., & Bhargavan, K. (2023) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp57164.2023.00048 · Cited by 4 · see citing works
An Offline Dictionary Attack Against zkPAKE Protocol
Becerra, J., Ryan, P. Y. A., Šala, P., & Škrobot, M. (2019) · IFIP advances in information and communication technology · doi:10.1007/978-3-030-22312-0_6 · Cited by 4 · see citing works
VSPAKE: Provably secure verifier-based PAKE protocol for client/server model in TLS ciphersuite
Qi, M. (2024) · Journal of Systems Architecture · doi:10.1016/j.sysarc.2024.103082 · Cited by 3 · see citing works
An Offline Dictionary Attack against zkPAKE Protocol
Becerra, J., Ryan, P. Y. A., Šala, P., & Škrobot, M. (2018) · ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec) · doi:10.1145/3212480.3226110 · Cited by 2 · see citing works
WPA3 Personal and Enterprise Wireless Security Algorithm Labs for Undergraduate Level
Salib, E. H. (2024) · ASEE Annual Conference & Exposition · doi:10.18260/1-2--44438 · Cited by 1 · see citing works
Wireless LAN Security: 802.11 and Wi-Fi
van Oorschot, P. C. (2021) · Information security and cryptography · doi:10.1007/978-3-030-83411-1_12 · Cited by 1 · see citing works
Wireless Local Area Network (WLAN)
Sauter, M. (2021) · doi:10.1002/9781119714712.ch7 · Cited by 1 · see citing works
Дослідження безпеки стандарту Wi-Fi Protected Access 3 (WPA3)
Опірський, І., Максимів, Н., & Женчур, М. (2023) · Ukrainian Scientific Journal of Information Security · doi:10.18372/2225-5036.29.17549
Wi-Fi 7 Principles and Innovations
Cheng, G., Qian, Z., Jiang, Y., Yang, Z., & Rajamanickam, T. (2024) · Springer eBooks · doi:10.1007/978-981-97-9026-5_3
Tan, Y. C., Tan, W. X., Bajaj, H. S., & Yap, C. N. (2024) · doi:10.1145/3718391.3718422
Cryptographie dans la nature : la sécurité des implémentations cryptographiques
Braga, D. D. A. (2022) · theses.fr (ABES) · doi:10.70675/ee4351d6zfa56z4f84zb520zfa000f7a1f27
VTBSAE: Provably Secure Verifier-Based Password Authenticated Key Exchange for IIoT
Qi, M. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3685297
Provable Security and Privacy Analysis of WPA3’s SAE and SAE-PK Protocols
Chen, S., Pan, K., & Sanina, O. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-25317-0_6
Aljassim, S., Hussain, M. A., Abduljabbar, Z. A., AL-Asadi, H. A. A., Nyangaresi, V. O., Ali, A. H., & Aldarwish, A. J. Y. (2026) · Cybernetics and Information Technologies · doi:10.2478/cait-2026-0025
Provably Secure Practical Lightweight Post-Quantum Key Establishment for IoMT
Prasad, J., Kumar, P., Duffy, M., & Lambert, A. (2026) · ACM Workshop on CPS&IoT Security and Privacy (CPSIoTSec) · doi:10.1145/3847353.3847498
beevi, A. A. S. K., & Reddy, A. K. (2026) · International Journal of Scientific Research and Modern Technology. · doi:10.38124/ijsrmt.v5i9.1703
- Publisher
- RFC Editor
- Published
- 2015-11
- OpenAlex
- W2285187078
- Semantic Scholar
- 4ffd57074d0920d749c0479e95ad7598f32e34ed
- Cited by
- 29
- References
- 10
- Citations by year
- 2026: 5 · 2024: 5 · 2023: 5 · 2022: 1 · 2021: 3 · 2020: 3 · 2019: 3 · 2018: 2 · 2015: 2
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Keywords
- key exchange, discrete logarithm problem, password authentication, offline dictionary attack, authenticated key agreement
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
