Oreko

5 ms·

1. 1.▲
   by Oreko 4y ago

   I haven't read their protocol, but you can easily implement PIR using FHE through polynomial evaluation.
2. 2.▲
   by Oreko 4y ago

   SCRAM seems incredibly insecure. Does anyone have information on how many servers support SCRAM?
3. 3.▲
   by Oreko 4y ago

   Is there a scheme using these principles that isn't known to be insecure? Or one that has a proof of security by reduction to a known (or supposed) hard problem? A brief look online makes it sound like all provided schemes have extreme
4. 4.▲
   by Oreko 4y ago

   Another confusion on my part, above the protocol Sc00bz writes: " Client without password has: idC = client identity P = hashToPoint(p) c S = s * P Reg = reg * G (reg = registration private key) &quo
5. 5.▲
   by Oreko 4y ago

   Turns out I misread part of the protocol. I mixed up "b" stored by the server in the registration phase and the "b" used in the online phase. In that case, the adversary can't compute either b * C or c * B (by proba
6. 6.▲
   by Oreko 4y ago

   Augmented is a common label for these kind of PAKEs. Generally speaking, asymmetric, verifier-based, and augmented are all three interchangeable. Sc00bz made a comment[1] on reddit describing what "doubly augmented" means where th
7. 7.▲
   by Oreko 4y ago

   Hi, I perform research in the area of PAKEs. I'm not a "foremost expert" but I know a bit. Before I start, I don't believe that it's standard to use the term "doubly augmented PAKEs". Instead, I'll us