I would like to register and authenticate users on a server by a password, when both the server and client may not be trusted. I've been looking at [PAKE](https://en.wikipedia.org/wiki/Password-authenticated_key_agreement) but I can't seem to find any implementations, and some of the RFCs seem to be written for some higher order being, who's language I cannot understand.

I've thought of a process to achieve what I want, just would like to know if anyone can see a problem with it, or could recommend an alternative. Cheers!

EDIT:
I would like to register and authenticate users on a server by a password, when both the server and client may not be trusted. I've been looking at [PAKE](https://en.wikipedia.org/wiki/Password-authenticated_key_agreement) but I can't seem to find any implementations, and some of the RFCs seem to be written for some higher order being, who's language I cannot understand.
I've thought of a process to achieve what I want, just would like to know if anyone can see a problem with it, or could recommend an alternative. Cheers!