All Questions
1 question
3
votes
1
answer
78
views
Is the user's password revealed to a curious server in the OPAQUE PAKE?
If the server is honest-but-curious, it can attempt to guess the user’s password $\mathsf{pw}$ by computing $\mathsf{rw} = H(\mathsf{pw}, H'(\mathsf{pw})^s)$,where $s$ is the server's OPRF key. Then, ...
