How Schnorr signature security can be proved for signature forgery, replacement, and Replay attacks?

  • 1
    $\begingroup$ Signatures are static, thus can be replayed. Are you thinking of the Schnorr identification protocol? $\endgroup$
    – fgrieu-onstrike
    Dec 17, 2022 at 13:14
  • $\begingroup$ No, I am using Schnorr to sign a message m, and I want to make sure this signature can be replayed in case of a message update. i.e. sig(m) != sig(m'). $\endgroup$
    – SHI MA
    Dec 17, 2022 at 13:29
  • $\begingroup$ eprint.iacr.org/2012/029.pdf $\endgroup$
    – polfosol
    Dec 17, 2022 at 14:10
  • $\begingroup$ @polfosol thank you $\endgroup$
    – SHI MA
    Dec 18, 2022 at 2:13


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.