# Python implementation of a blind signature scheme which doesn't involve RSA

RSA seems a bit creepy after the Snowden revelations and i'm looking for a simple python based blind signature library to fiddle around with. So far i've been unable to find anything. What am i missing?

• What are exactly your concerns about RSA after the Snowden revelations? I mean the cryptosystem, not the company. – cygnusv Feb 3 '15 at 9:28
• Generating good enough primes is the deal-breaker for me.. – user37203 Feb 3 '15 at 9:56
• @user37203: Really if you don't trust prime number generation ! Otherwise the reference in blind signature was introduced in the early $90^{ies}$ by David Chaum, that you can search over the web. However this is without some controversies as this paper claims it: cs.duke.edu/~reif/temp/electronic.cash/… – Robert NACIRI Feb 3 '15 at 10:37
• All the blind signature schemes i have found use RSA, and come as a part of a pretty big package - they depend on too many external things. I'm really looking for a small library such as ed25519-python – user37203 Feb 3 '15 at 10:51
• @user37203: What do you mean with "Generating good enough primes ....."? Together with your last post, do you mean that the prime number generation part of a big package is in practice fairly troublesome to check whether it's free of security problems (and impossible if the package is binary)? If so, I have had the same concern and implemented in some 50 lines of Python Maurer's algorithm (see HAC p.153) of generation of random provable (in contrast to highly probable) primes, available at s13.zetaboards.com/Crypto/topic/7234475/1 – Mok-Kong Shen Feb 3 '15 at 12:25