Zero-Knowledge Proof Auth

The server NEVER knows your password. Not in transit, not hashed, not even as a bcrypt digest. The client derives a keypair from the password (PBKDF2 → ECDSA P-256) and sends only the public key. Login works via challenge-response: the server sends a nonce, the client signs it, the server verifies.