= PicL PiCL Key Server / IdP Protocol =
== Email+Password -> AccountToken ==
The current stub just submits plaintext email+password and receives back (accountToken, kA, wrap(kB)). This will be replaced soon.
=== Client-Side Key Stretching ===
== Signing Certificates ==
The current stub just submits (cert, signToken), and gets back a signed certificate. This will be replaced soon.
== Resetting the Account ==
The current stub just submits (newPassword, wrap(kB), resetToken). This will be replaced soon.