Although even non-augmented ZKPPs should a good KDF because even though the server stores a password equivalent there is still value in protecting the actual password.
_______________________________________________ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography