Imagine a situation where a prover can only sign with BLS signature signing algorithm, a verifier can only verify with Schnorr signature verification algorithm. Is it possible to convert a BLS signature to a Schnorr signature, so that a verifier who can only verify Schnorr signatures can verify derived signature given public key and message?
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
You can't convert the signature output from one algorithm to another, especially not ones relying on random oracles.
