K

R

P

U

C

the encryption key

the user’s selected ASCII passphrase of arbitrary length

the ASCII password to be encrypted

the URL or other ASCII identifier for the web service

the encrypted password

the user’s share of the split encryption key (derived from R)

the server’s share of the split encryption key (derived from K and)