Timeline for How robust is RSA-FDH against distribution bias?
Current License: CC BY-SA 4.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 16, 2019 at 20:05 | history | edited | Squeamish Ossifrage | CC BY-SA 4.0 |
Answer the question that was specifically asked.
|
| S Mar 16, 2019 at 19:52 | history | edited | Squeamish Ossifrage | CC BY-SA 4.0 |
Link to an answer replete with references about anonymous signatures and related concepts.
|
| S Mar 16, 2019 at 19:52 | history | suggested | phayes | CC BY-SA 4.0 |
Adding a small clarification to clarify that "anonymous signing" refers to the anonymity of the signer, not the anonymity of the sender.
|
| Mar 16, 2019 at 17:21 | review | Suggested edits | |||
| S Mar 16, 2019 at 19:52 | |||||
| Mar 16, 2019 at 16:37 | comment | added | Squeamish Ossifrage | The appellation ‘German tank problem’ was given by anglophone statisticians during World War II when they actually were trying to count German tanks rather than distinguish RSA moduli by samplings of signatures, and the name stuck. | |
| Mar 16, 2019 at 16:26 | history | edited | Squeamish Ossifrage | CC BY-SA 4.0 |
Clarify role of input and output here.
|
| Mar 16, 2019 at 16:25 | comment | added | Squeamish Ossifrage | For a $t$-bit $F$, you did rejection sampling for $r$ until $F(r) < n$ where $F(r)$ is the input to private key operation $x \mapsto x^{1/e} \pmod n$. To attain anonymous signatures, you can do rejection sampling for $r$ until $F(r)^{1/e} < 2^{t - 1}$ instead where $F(r)^{1/e}$ is the output of the private key operation. I edited to clarify that it's rejection sampling on the hash vs. rejection sampling on the signature. | |
| Mar 16, 2019 at 16:21 | comment | added | Squeamish Ossifrage | References on anonymous signatures and the German tank problem: crypto.stackexchange.com/a/67918 | |
| Mar 16, 2019 at 16:20 | comment | added | phayes | Thanks for the in depth answer! Could you explain a bit more what you mean by "on the output rather than the input, to thwart anglophone statisticians from counting German tanks" ? | |
| Mar 16, 2019 at 16:15 | history | edited | Squeamish Ossifrage | CC BY-SA 4.0 |
Point out that there is a bit of slop anyway.
|
| Mar 16, 2019 at 16:09 | history | answered | Squeamish Ossifrage | CC BY-SA 4.0 |