Protecting accounts from credential stuffing with password breach alerting

A privacy-preserving protocol whereby a client can query a centralized breach repository to determine whether a specific username and password combination is publicly exposed, but without revealing the information queried is proposed.