family of password-authenticated key agreement methods described by Steven M. Bellovin and Michael Merritt