When Pwned Passwords Bloom
scotthelme.co.uk
scotthelme.co.uk
Edit: To my knowledge, the first suggestion of this idea was by Eugene Spafford in 1992: https://dl.acm.org/citation.cfm?id=134593
Something I didn't get though, is why pick k=27 instead of say k=20, which seems to have similar size, but would be faster to query? In fact, varying k between 20 and 30 doesn't seem to have much impact on size, so why not reduce it even further?