Register a password with the server.
The server stores the registration record without ever learning the password. Uses OPRF to derive a key from the password, then encrypts credentials into an envelope.
User's password.
Unique server identifier.
Register a password with the server.
The server stores the registration record without ever learning the password. Uses OPRF to derive a key from the password, then encrypts credentials into an envelope.