I am asking for help in finding a signature algorithm with the following property:
- Given a message
mand a private key
prikey, the result of signing
prikeyis unique (which is stricter than deterministic). In another word, there is only one signature (or finding another one using
prikeyis securely hard) that can pass the verification by the public key of
- High space efficiency of storing private key and signature.
ECDSA's space efficiency is satisfying, but the signature is not unique; RSA has uniqueness, but is there any alternative with better space efficiency?