2
$\begingroup$

Is it possible to implement blind signatures with purely hash-based signature algorithms?

Any whitepapers, code samples, etc on the subject would be helpful.

$\endgroup$
3
$\begingroup$

It's impossible:

Impossibility of Blind Signatures From One-Way Permutations - Katz, Schroder, Yerukhimovich

$\endgroup$
  • $\begingroup$ Would this be inclusive of things like SPHINCS+? $\endgroup$ – CoryG Jan 1 '18 at 2:51
2
$\begingroup$

Till today, there is no known construction for this. The problem is that standard hash functions do not come with the necessary algebraic properties required for blinding and unblinding.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.