On 12/24/14, Michael Hamburg <[email protected]> wrote: > You asked specifically about batch verification. I’m not aware of deployed > systems that need or use batch verification. The EVITA vehicle-to-vehicle > specs do require an extremely high rate of verification, but since they use > ECDSA, no batching is possible. It might or might not be desirable in that > setting, because there are constraints on latency as well as throughput, but > having an option would be nice.
Vehicle-to-vehicle communications is also an excellent example of a non-anonymity-related application in which implementation-distinguishing attacks can be quite serious. (Imagine a car accepting the signature on a message which tells it to slow down, and the large truck behind it rejecting that same signature.) Robert Ransom _______________________________________________ Curves mailing list [email protected] https://moderncrypto.org/mailman/listinfo/curves
