3
$\begingroup$

I'm curious to hear of algorithms that use this new standard (there is a new IRTF CFRG Draft for it, for instance). It's useful for verifiably deterministic signatures on elliptic curves, but what else?

$\endgroup$
1
  • 1
    $\begingroup$ @kodlu: in the CFRG, it's known as the 'Hash2Curve' draft. $\endgroup$
    – poncho
    Oct 26, 2022 at 2:42

1 Answer 1

3
$\begingroup$

I've seen it referenced in the Verifiable Random Functions draft, and referenced by projects implementing BLS Signatures. Hash-to-curve more generally is also used in linkable ring signatures to provide the 'key image' / 'tag' that can be used to check if a ring signature has been anonymously produced by the same person twice.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.