Everything you need to know about PAKEs and then some: what, why, which, blind salt, quantum resistance, APIs, HSMs, password KDFs, secret salts, and recovering a lost secret salt.

PAKEs need to be easy to use and hard to misuse, otherwise adoption rates will be low. Take SRP, almost every implementation has functions like “calculateA”, “calculateU”, etc. To use these libraries you need to know exactly how SRP works. Some programmers might choose to send the server …