Number theoretic attacks on secure password schemesTowards making Luby-Rackoff ciphers optimal and practical