NICE-PAKE: On the Security of KEM-Based PAKE Constructions without Ideal Ciphers | Synapse