diff --git a/services/identity/src/database.rs b/services/identity/src/database.rs
--- a/services/identity/src/database.rs
+++ b/services/identity/src/database.rs
@@ -1,5 +1,14 @@
-use rusoto_core::Region;
-use rusoto_dynamodb::DynamoDbClient;
+use std::collections::HashMap;
+
+use opaque_ke::{errors::ProtocolError, ServerRegistration};
+use rusoto_core::{Region, RusotoError};
+use rusoto_dynamodb::{
+  AttributeValue, DynamoDb, DynamoDbClient, GetItemError, GetItemInput,
+  GetItemOutput,
+};
+use tracing::{error, info};
+
+use crate::opaque::Cipher;
 
 pub struct DatabaseClient {
   client: DynamoDbClient,
@@ -11,4 +20,77 @@
       client: DynamoDbClient::new(region),
     }
   }
+
+  pub async fn get_pake_registration(
+    &self,
+    user_id: String,
+  ) -> Result<Option<ServerRegistration<Cipher>>, Error> {
+    let partition_key = HashMap::from([(
+      "userID".to_string(),
+      AttributeValue {
+        s: Some(user_id.clone()),
+        ..Default::default()
+      },
+    )]);
+    let get_item_input = GetItemInput {
+      table_name: "identity-pake-registration".to_string(),
+      key: partition_key,
+      consistent_read: Some(true),
+      ..GetItemInput::default()
+    };
+    let get_item_result = self.client.get_item(get_item_input).await;
+    match get_item_result {
+      Ok(GetItemOutput {
+        item: Some(item), ..
+      }) => {
+        if let Some(AttributeValue {
+          b: Some(server_registration_bytes),
+          ..
+        }) = item.get("pakeRegistrationData")
+        {
+          match ServerRegistration::<Cipher>::deserialize(
+            server_registration_bytes,
+          ) {
+            Ok(server_registration) => Ok(Some(server_registration)),
+            Err(e) => {
+              error!(
+                "Failed to deserialize ServerRegistration struct for user {}: {}",
+                user_id, e
+              );
+              Err(Error::Pake(e))
+            }
+          }
+        } else {
+          error!("No registration data found for registered user {}", user_id);
+          Err(Error::MissingAttribute)
+        }
+      }
+      Ok(_) => {
+        info!(
+          "No item found for user {} in PAKE registration table",
+          user_id
+        );
+        Ok(None)
+      }
+      Err(e) => {
+        error!(
+          "DynamoDB client failed to get registration data for user {}: {}",
+          user_id, e
+        );
+        Err(Error::Rusoto(e))
+      }
+    }
+  }
+}
+
+#[derive(
+  Debug, derive_more::Display, derive_more::From, derive_more::Error,
+)]
+pub enum Error {
+  #[display(...)]
+  Rusoto(RusotoError<GetItemError>),
+  #[display(...)]
+  Pake(ProtocolError),
+  #[display(...)]
+  MissingAttribute,
 }