I haven't read their protocol, but you can easily implement PIR using FHE through polynomial evaluation.
SCRAM seems incredibly insecure. Does anyone have information on how many servers support SCRAM?
Another confusion on my part, above the protocol Sc00bz writes: " Client without password has: idC = client identity P = hashToPoint(p) c S = s * P Reg = reg * G (reg = registration private key) "
Turns out I misread part of the protocol. I mixed up "b" stored by the server in the registration phase and the "b" used in the online phase. In that case, the adversary can't compute either b * C or c * B (by probably…
Augmented is a common label for these kind of PAKEs. Generally speaking, asymmetric, verifier-based, and augmented are all three interchangeable. Sc00bz made a comment[1] on reddit describing what "doubly augmented"…
Hi, I perform research in the area of PAKEs. I'm not a "foremost expert" but I know a bit. Before I start, I don't believe that it's standard to use the term "doubly augmented PAKEs". Instead, I'll use the more accepted…
I haven't read their protocol, but you can easily implement PIR using FHE through polynomial evaluation.
SCRAM seems incredibly insecure. Does anyone have information on how many servers support SCRAM?
Another confusion on my part, above the protocol Sc00bz writes: " Client without password has: idC = client identity P = hashToPoint(p) c S = s * P Reg = reg * G (reg = registration private key) "
Turns out I misread part of the protocol. I mixed up "b" stored by the server in the registration phase and the "b" used in the online phase. In that case, the adversary can't compute either b * C or c * B (by probably…
Augmented is a common label for these kind of PAKEs. Generally speaking, asymmetric, verifier-based, and augmented are all three interchangeable. Sc00bz made a comment[1] on reddit describing what "doubly augmented"…
Hi, I perform research in the area of PAKEs. I'm not a "foremost expert" but I know a bit. Before I start, I don't believe that it's standard to use the term "doubly augmented PAKEs". Instead, I'll use the more accepted…