3 ms·
It's a pointless technique as noted by others. Along the same lines though is OPAQUE PAKE, where the server doesn't need to store a password hash, only a salt,
by A2017U1 8y ago
It's a pointless technique as noted by others.
Along the same lines though is OPAQUE PAKE, where the server doesn't need to store a password hash, only a salt, making server compromise far less dangerous, it's quite elegant.
There's no implementations so far I believe.
https://eprint.iacr.org/2018/163 https://eprint.iacr.org/2018/163