Timeline for What would be the security consequences of replacing $H(R, A, M)$ with $H(R, M)$ in EdDSA?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Oct 29, 2023 at 18:16 | history | suggested | tur11ng | CC BY-SA 4.0 |
Add a more practical explanation along with its source.
|
| Oct 29, 2023 at 12:01 | review | Suggested edits | |||
| S Oct 29, 2023 at 18:16 | |||||
| Oct 29, 2023 at 11:58 | comment | added | tur11ng | After a lot of research I finally found this : github.com/MystenLabs/ed25519-unsafe-libs | |
| Oct 28, 2023 at 16:41 | comment | added | Paul Miller | The hint is in small-order public keys. See the paper, it provides extensive details. | |
| Oct 28, 2023 at 13:48 | comment | added | tur11ng | Can you elaborate more? Since $a$ (the private key) is involved in the signature creation process and since there is 1-1 relationship between private and public keys why it will remove the non repudiation property from the signature? | |
| Oct 27, 2023 at 16:08 | vote | accept | tur11ng | ||
| Oct 28, 2023 at 13:47 | |||||
| Oct 27, 2023 at 12:00 | history | answered | Paul Miller | CC BY-SA 4.0 |