Skip to main content
Cryptography

Return to Question

Tweeted twitter.com/StackCrypto/status/711684567128788994
edited body
Source Link
user32609
user32609
  • 113
  • 5

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. Are there examples of signatures which are EUFSUF-CMA, but not SUFEUF-CMA?

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. Are there examples of signatures which are EUF-CMA, but not SUF-CMA?

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. Are there examples of signatures which are SUF-CMA, but not EUF-CMA?

edited body
Source Link
e-sushi
e-sushi
  • 18.1k
  • 12
  • 85
  • 235

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. areAre there examples of signatures which are EUF-CMA, but not SUF-CMA?

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. are there examples of signatures which are EUF-CMA, but not SUF-CMA?

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. Are there examples of signatures which are EUF-CMA, but not SUF-CMA?

Source Link
user32609
user32609
  • 113
  • 5

Selective and existential unforgability of signature schemes

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must output a pair (m, s) such that s is a valid signature of m, and m has not been queried before. My questions are the following:

  1. How does one select selective unforgability under chosen message attack in terms of a game?

  2. are there examples of signatures which are EUF-CMA, but not SUF-CMA?