Editing MQV (section)

{{short description|Public-key exchange protocol}}
'''MQV''' ('''Menezes–Qu–Vanstone''') is an [[authentication|authenticated]] [[protocol (cryptography)|protocol]] for [[key agreement]] based on the [[Diffie–Hellman]] scheme. Like other authenticated Diffie–Hellman schemes, MQV provides protection against an active attacker. The protocol can be modified to work in an arbitrary [[finite group]], and, in particular, [[elliptic curve]] groups, where it is known as '''elliptic curve MQV (ECMQV)'''.

MQV was initially proposed by [[Alfred Menezes]], Minghua Qu and [[Scott Vanstone]] in 1995. It was later modified in joint work with Laurie Law and Jerry Solinas.<ref>{{Cite journal | last1 = Law | first1 = L. | last2 = Menezes | first2 = A. | author-link2 = Alfred Menezes | last3 = Qu | first3 = M. | last4 = Solinas | first4 = J. | last5 = Vanstone | first5 = S. | author-link5 = Scott Vanstone | title = An Efficient Protocol for Authenticated Key Agreement| journal = [[Designs, Codes and Cryptography|Des. Codes Cryptography]] | volume = 28 | issue = 2 | pages = 119–134 | doi = 10.1023/A:1022595222606 | year = 2003 | s2cid = 27921095 }}</ref> There are one-, two- and three-pass variants.

MQV is incorporated in the public-key standard [[IEEE P1363]] and NIST's SP800-56A standard.<ref>{{cite journal|title=Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography|url=https://csrc.nist.gov/publications/detail/sp/800-56a/rev-2/final|access-date=15 April 2018|doi=10.6028/NIST.SP.800-56Ar2|year=2013|last1=Barker|first1=Elaine|last2=Chen|first2=Lily|last3=Roginsky|first3=Allen|last4=Smid|first4=Miles|doi-access=free}}</ref>

Some variants of MQV are claimed in patents assigned to [[Certicom]].

ECMQV has been dropped from the National Security Agency's [[NSA Suite B|Suite B]] set of cryptographic standards.

__TOC__