18 reputation
3
bio website
location
age
visits member for 6 months
seen Jul 8 at 15:19

Apr
2
asked How to compare different signature scheme's performance?
Feb
20
comment Shamir's ID based signatures - Notation issues
Thank you for your answer. Does (mod n) relate to the whole right hand side (i.e., [g*r^f(t,m)] mod n), or to the exponentiation, only (i.e., g * [r^f(t,m) mod n])?
Feb
19
asked Shamir's ID based signatures - Notation issues
Feb
11
comment Shamir's ID based signatures
Dear DrLecter: Do you have any recommendations on the size of r and t? I was also asking myself, whether the modulo is applied to whole right hand side, when calculating s or only to the exponentiation.
Feb
2
awarded  Scholar
Feb
2
accepted Shamir's ID based signatures
Jan
31
revised Shamir's ID based signatures
deleted 173 characters in body
Jan
31
comment Shamir's ID based signatures
So the correct condition for verification is sig_mi.s^pk_m.e (mod n) == hash'(i)^pk_m.e * t^hash''(t, message) (mod n)?
Jan
31
comment Shamir's ID based signatures
Dear DrLecter, mixing up d and g is a consequence of using the same data structures for master key(s) and id-based key(s). I tried to clarify by editing again, so sk_i.d is $g$ as generated by getPrivateKey. However, I am still not sure about the verification, maybe you can have another look? Thanks for your efforts.
Jan
31
revised Shamir's ID based signatures
Included DrLecter's feedback.
Jan
30
comment Shamir's ID based signatures
Another try, implementing sign and verify as described in the paper.
Jan
30
revised Shamir's ID based signatures
added 697 characters in body
Jan
30
comment Shamir's ID based signatures
Thanks for your comments. I edited my post to reflect your answer. So far this should be correct? Regarding verification and generation, I will have a sharp look at the paper, again.
Jan
30
revised Shamir's ID based signatures
deleted 255 characters in body
Jan
30
awarded  Editor
Jan
30
revised Shamir's ID based signatures
added 708 characters in body
Jan
30
comment Shamir's ID based signatures
So you are claiming that an arbitrary RSA implementation can be "onverted" into an IBS scheme by setting $d = e^{-1}$, which I could simply extract with Java's mod inverse function.
Jan
29
awarded  Student
Jan
29
asked Shamir's ID based signatures