The PAKE protocol allows two parties to securely negotiate a high-strength encryption key using only a shared low-entropy passphrase, while resisting man-in-the-middle attacks and offline dictionary attacks.