Timeline for DSA vs. ElGamal vs. Schnorr
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 25, 2021 at 8:11 | comment | added | Kaspar Etter | I count three modular exponentiations for the verification of ElGamal signatures (and one for signing). The performance of the key generation doesn't seem crucial to me. | |
| Sep 17, 2013 at 17:12 | comment | added | Nemo | Great set of links (especially "see this message for another analysis"). It looks to my non-expert eye like Schnorr had a pretty strong case, since the use of a "Schnorr group" to reduce the signature size is a pretty important idea in both the patent(s) and the DSA. Anyway it appears the answer to my question is "NSA did not like RSA and wanted an IP-free alternative for signatures." Whether IP concerns alone explain that dislike is harder to say, I think... RSA's applicability to encryption as well as signing is also plausible. | |
| Sep 17, 2013 at 16:38 | vote | accept | Nemo | ||
| Sep 16, 2013 at 22:35 | history | answered | Thomas Pornin | CC BY-SA 3.0 |