Yes, but they are only exchanging a constant amount of information to fool the server challenge, whereas we could hope to do better if the server builds challen

Yes, but they are only exchanging a constant amount of information to fool the server challenge, whereas we could hope to do better if the server builds challenges which use information that he knows the client has. For some reason, this inspired me to write a blog post: http://a3nm.net/blog/deduplication_attacks.html http://a3nm.net/blog/deduplication_attacks.html and http://news.ycombinator.com/item?id=2489594 http://news.ycombinator.com/item?id=2489594