On 26-01-2011 19:36, Jon Callas wrote: > Why are you leaning to Rabin-Williams for all the features that are also > features of RSA? People don't break signatures because of hard problems, they > break them because the software has bugs in it. You're discussing the > resistance of the walls to a chainsaw, while leaving a bread tie on a hasp as > the lock. > > Jon
Well, why not? R-W signatures are as good as RSA, plus they have a) tight security reduction b) can have up to 3x faster verification than e=3 RSA. Samuel Neves _______________________________________________ cryptography mailing list [email protected] http://lists.randombit.net/mailman/listinfo/cryptography
