On Sat, Mar 31, 2001 at 02:48:51PM -0800, John H. Robinson, IV wrote: > user-supplied random data plus system-generated random data would > probably be required, to prevent collision between Alice and Bob both > supplying the same random data.
Alternatively, the user's debian-id could be included (since this is guaranteed to be unique for any valid voter). However, you still need some source of randomness (user-supplied is best, I think) to avoid dictionary analysis of the acknowledgement hash. -- Raul
