Here, w=f(weak secret data), where f is a function which generates an element of a group G, and the ephemeral client secret includes the random integer a for which there exists a corresponding integer a??? such that xaa???=x for all x in the group G. The group G is a finite group in which exponentiation is efficient but the discrete logarithm problem is computationally infeasible, for example the