Abstract: Most password-based user authentication systems place total trust on the authentication server where cleartext passwords or easily derived password verification data are stored in a central ...