Skip to main content
edited title
Link
Ievgeni
  • 2.6k
  • 1
  • 11
  • 33

Why s=0$s=0$ is not allowed in Elgamal signature?

Bumped by Community user
Bumped by Community user
Bumped by Community user
Source Link

Why s=0 is not allowed in Elgamal signature?

In Elgamal signature scheme $\text{sig}_{k_{pr}}(x,k_E)=(r,s)$, $s=0$ is not allowed. How does this lead to finding the private key $d$?