Editing Key-agreement protocol (section)

=== Passwords ===
[[Password-authenticated key agreement]] protocols require the separate establishment of a [[password]] (which may be smaller than a key) in a manner that is both private and integrity-assured. These are designed to resist man-in-the-middle and other active attacks on the password and the established keys. For example, DH-[[Encrypted key exchange|EKE]], [[SPEKE (cryptography)|SPEKE]], and [[Secure remote password protocol|SRP]] are password-authenticated variations of Diffie–Hellman.