Tagged Questions
1
vote
1answer
63 views
Is Guillou-Quisquater existentially unforgeable against adaptive message attack under a random oracle model?
First of all, the Guillou-Quisquater digital signature scheme is:
Note everything is $\bmod n$. Message is denoted by $m$.
Private key: $s$
Public key: Hash function $H$, $e$, ...
6
votes
1answer
108 views
Why does it matter for a signature scheme to be without random oracles?
There is a profusion of articles proposing signature schemes without random oracles (see for yourself). What does that mean, and why does it matter?
