Viewing profile — Oreko

I haven't read their protocol, but you can easily implement PIR using FHE through polynomial evaluation.

SCRAM seems incredibly insecure. Does anyone have information on how many servers support SCRAM?

Is there a scheme using these principles that isn't known to be insecure? Or one that has a proof of security by reduction to a known (or supposed) hard problem? A brief look onlin…

Another confusion on my part, above the protocol Sc00bz writes: " Client without password has: idC = client identity P = hashToPoint(p) c S = s * P Reg = reg * G (reg = registratio…

Turns out I misread part of the protocol. I mixed up "b" stored by the server in the registration phase and the "b" used in the online phase. In that case, the adversary can't comp…

Augmented is a common label for these kind of PAKEs. Generally speaking, asymmetric, verifier-based, and augmented are all three interchangeable. Sc00bz made a comment[1] on reddit…

Hi, I perform research in the area of PAKEs. I'm not a "foremost expert" but I know a bit. Before I start, I don't believe that it's standard to use the term "doubly augmented PAKE…