Protocol that lets two parties establish a shared key using only a low entropy password while resisting offline dictionary attacks, based on zero knowledge proofs.