I've experimented with using a bloom filter for this dataset: https://github.com/jthomas/serverless-pwned-passwords