Tag Info

New answers tagged


I am not aware of a scheme that fulfills your requirements as defined above, but: If your goal is that Bob can sign a message such that only Alice can verify it and she can proof no one else that this message was sent by Bob then chameleon signatures aka deniable signatures are the tool you are looking for. Schemes were proposed in Hugo Krawczyk, Tal ...


In Ed25519 a private key is simply a 256 bit random number, and the public key is derived easily from this. The public key can also easily be interpreted as a 256 bit number. Bob can send Alice his public key, Alice can generate a secrete nonce, and then use a HMAC of the key and nonce to generate herself a new private key. If she communicates the nonce ...

Top 50 recent answers are included