Hot answers tagged key-rotation
I don't believe there is any way to achieve what you want, within your constraints. You stated as a requirement that a user must be able to get all of their data from the server, without storing anything other than their private key. If an attacker learns the private key, the attacker then knows everything that the user does, so of course the attacker can ...
Only top voted, non community-wiki answers of a minimum length are eligible