Design a conceptual authentication protocol for a web application that uses Zero-Knowledge Proofs (ZKPs) to verify user identity without transmitting a password or relying on a central database storing passwords. Explain the mathematical steps involved in the proof generation and verification phases, and analyze how this system mitigates common attacks such as phishing, replay attacks, and server breaches.