Sarvar Patel: Number Theoretic Attacks on Secure Password Schemes. S&P 1997: 236-247