Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to learn more about the Subgroups implementation of Microsoft UProve. I'm unsure if they are Schnorr Groups or use a different foundation?

Can anyone point me to the technical reading required to understand the implementation? (anything appropriate for a determined, yet fledgling novice would be appreciated)

share|improve this question
up vote 3 down vote accepted

U-Prove Recommended Parameters describes the groups used by U-Prove.

For the subgroup variant it references Appendix A.1.1.3 of FIPS186-3 which is about groups for finite-field based DSA. AFAIK these groups are Schnorr groups, even though NIST never refers to them as such.

The ECC variant uses standard NIST curves such as P-256, P-384 and P-521.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.