0
$\begingroup$

For signatures, there is the security goal of existential unforgeability. As seen here and noted here (german source) the security goal can be split into weak and strong unforgeability for chosen message attacks.

As far as I understand it, the difference between strong and weak is having a completely arbitrary message to sign, or a message that has not yet been signed.

My question: Is there any reason why this definition can not be applied to known message attacks?

Improve this question
$\endgroup$
2
  • $\begingroup$ Who says that it can't? But more importantly what is a known message attack on signatures to you? $\endgroup$
    – Maeher
    Jun 25, 2022 at 13:42
  • $\begingroup$ I mean, that the adversary has access to some message signature pairs (not chosen by A)... Interestingly no one stated, that it is not possible, but they explicitly considered the case of sEUF and wEUF only for chosen message $\endgroup$
    – Titanlord
    Jun 27, 2022 at 8:03

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.