A Simple Provably Secure AKE from the LWE Problem

Table 1

Comparison between previous AKEs and our proposed AKE.

NAXOS [7]			eCK, wPFS	Rom	GDH	No
CMQV [34]			eCK, wPFS	Rom	GDH	No
HMQV [5]			CK^+, wPFS	Rom	GDH	No
FSX [26]		OW-CCA	CK^+	Rom	RLWE	Yes
FSXY [27]		CCA^+	CK^+	×	(R-)LWE	Yes
BCN [18]		CPA	ACCE	Rom	RLWE	Yes
Ours			BR, wPFS	Rom	LWE	Yes