protocols for authentication and key establishment are the foundation for security of communications. the range and diversity of these protocols is immense, while the properties and vulnerabilities of different protocols can be remarkably subtle. here is a comprehensive and integrated treatment of protocols for authentication and key establishment. it allows researchers and practitioners to quickly access a protocol for their needs and become aware of existing protocols that have been broken in the literature. as well as a clear and uniform presentation of the protocols, this book includes a description of all the main attack types and classifies most protocols in terms of their properties and resource requirements. it also includes tutorial material suitable for graduate students.