Introduction
CreTAKE is a two-message authenticated key-exchange suite for endpoints with KEM-based or signature-based credentials. Four frameworks cover every ordered pairing of these credential types under a common interface.
- 01
Complete credential coverage
K2S, S2K, K2K, and S2S support both mixed and matching long-term credential types.
- 02
Two-message exchange
One message in each direction establishes a session key with authentication under the selected framework.
- 03
Concrete instantiations
The specification combines PolarLAC, ZEN, and BiT into 25 instances across three security levels.