I have seen this prior post: Elliptic Curve based blind signature implementation

Currently I'm sizing up how difficult it would be to attain Elliptic Curve Blind signatures for an application I'm working on.

I did see this posting from @DrLecter which was very informative.

How difficult is it to implement an ECC Blind Signature Scheme? is there anything out there already to start with? What schemes are considered reputable and secure? I'm trying to determine if I need to start with a whitepaper, develop an algo and code.

An RSA scheme is probably not to useful for me due to signature sizes.

  • $\begingroup$ You first need to find a secure scheme. I've seen ECC blind signature papers describing schemes that are clearly not secure. The lucre paper is relatively well known, so it have seen some analysis. $\endgroup$ – CodesInChaos Nov 23 '15 at 9:32
  • $\begingroup$ hello, Lucre is not based in ECC. that's an implementation of Chaum's blind sig concept. $\endgroup$ – Joshua Zeidner Nov 23 '15 at 17:30
  • $\begingroup$ If you look at anoncvs.aldigital.co.uk/lucre/theory2.pdf , it's clearly group based crypto, not RSA based crypto. AFAIK the main point of lucre was avoiding Chaum's (now expired) patents on RSA based blind signatures. $\endgroup$ – CodesInChaos Nov 23 '15 at 17:58
  • $\begingroup$ Related: A note on blind signature schemes - Matthew Green's blog $\endgroup$ – CodesInChaos Nov 23 '15 at 18:09
  • $\begingroup$ ok not sure what this has to do with my original question. $\endgroup$ – Joshua Zeidner Nov 23 '15 at 18:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.