On Tue, 2015-08-25 at 13:24 +0200, Jeff Burdges wrote: > Appears there is a much easier way to do all this. > > Idea 2 below effectively modifies ECDSA to sign a mathematical > relationship between two numbers, as opposed to signing the number > directly. It's slightly opaque what that mathematical relationship is, > but one must still take great care that the numbers are random and not > themselves signed. > > I now think this care with randomness alone suffices and one does not > need to modify ECDSA at all.
Oops, this is wrong. We actually do want that extra addition in ECDSA so that Bob can fake the signature itself, not merely use a signature of a mathematical relationship. It's probably still useful that I sent that email because the key exchange algorithm is worth discussing. Best, Jeff
signature.asc
Description: This is a digitally signed message part
_______________________________________________ GNUnet-developers mailing list [email protected] https://lists.gnu.org/mailman/listinfo/gnunet-developers
