Authenticated Key Exchange

Authenticated Key Exchange (AKE), Authenticated Key Agreement (AKA) or Authentication and Key Establishment (AKE) is the exchange or creation of a <a href="/facts/Session_key/aDLpKNVQ">session key</a> in a <a href="/facts/Key_exchange/gcYhnpFb">key exchange</a> protocol which also authenticates the identities of parties involved in key exchange. AKE typically occurs at the beginning of a communication session. Features of AKE protocols include determination of which keys already exist and can be used, how new keys will be generated, and how many users the protocol is applicable to.
AKE protocols make use of <a href="/facts/Cryptographic_key_types/5DwE8RfE">long term keys</a> that exist prior to the protocol, and session keys, which are typically <a href="/facts/Symmetric-key_algorithm/5zfe0b76">symmetric keys</a> established during the execution of the protocol. AKE protocols can be divided into four categories, based on the different types of long term keys used:

<ol><li>Pre-shared keys</li>
<li>Public–private key pairs</li>
<li>Identity-based keys</li>
<li>Passwords</li></ol>
The use of <a href="/facts/Transport_Layer_Security/pGy16TnA">Transport Layer Security</a> (TLS) to secure <a href="/facts/HTTP/TWtvf7JD">HTTP</a> connections is perhaps the most widely deployed AKE protocol.

Authenticated Key Exchange open-in-new

Authenticated Key Exchange