New answers tagged blind-signature
A much better way to choose r is while 1: s = random.getrandbits(KEYSIZE+privacyparameter) r = 1+(s%(n-1)) if gcd(r,n) == 1: break; . privacyparameter is chosen by the blinder. If $\:$ gcd(m,n) = 1 $\:$ then the statistical distance between the distribution of blinded_token and the uniform distribution on units mod n is less $\:$ ...
Top 50 recent answers are included