@url{https://www.cs.columbia.edu/~smb/papers/aeke.pdf, Augmented Encrypted Key Exchange}:
a Password-Based Protocol Secure Against Dictionary Attacks and Password
File Compromise @copyright{} Steven M. Belloving, Michael Merrit.
-@item @url{http://cr.yp.to/ecdh.html, A state-of-the-art Diffie-Hellman function}.
-@item @url{http://cr.yp.to/snuffle.html, Snuffle 2005: the Salsa20 encryption function}.
-@item @url{http://cr.yp.to/mac.html, A state-of-the-art message-authentication code}.
-@item @url{http://ed25519.cr.yp.to/, Ed25519: high-speed high-security signatures}.
@item @email{watsonbladd@@gmail.com, Watson Ladd} for suggestion of
@url{http://elligator.cr.yp.to/, Elligator} encoding.
@item @url{https://password-hashing.net/#argon2, PHC for Argon2}.
+@item Ronald L. Rivest for its
+@url{http://people.csail.mit.edu/rivest/chaffing-980701.txt, Chaffing
+and Winnowing: Confidentiality without Encryption}.
@end itemize