Chorus: Secret Recovery with Ephemeral Client Committees
Raluca Ada Popa
End-to-end encrypted applications protect user data by ensuring that user secrets are only available on client devices. However, if a user loses all of their devices, they need a way to recover their data using only a short password. To realize a password-based secret recovery system resilient to brute-force attacks, prior works relied on secure hardware or a few non-colluding servers.
In this work, we take a conceptually different approach that distributes trust across the many clients already