Password-Only Authenticated Three-Party Key Exchange Proven Secure against Insider Dictionary Attacks

Box 3

Deciding

Given a string and a tuple , first checks if the bit-length of is

equal to the bit-length of key derivation strings. If it is, then checks that (1) is

a prefix of and (2) where is a -bit string that is a suffix of . If both

are true, then .