2
$\begingroup$

Is it possible to implement blind signatures with purely hash-based signature algorithms?

Any whitepapers, code samples, etc on the subject would be helpful.

Improve this question
$\endgroup$

2 Answers 2

Reset to default
3
$\begingroup$

It's impossible:

Impossibility of Blind Signatures From One-Way Permutations - Katz, Schroder, Yerukhimovich

Improve this answer
$\endgroup$
1
  • $\begingroup$ Would this be inclusive of things like SPHINCS+? $\endgroup$
    – CoryG
    Jan 1, 2018 at 2:51
2
$\begingroup$

Till today, there is no known construction for this. The problem is that standard hash functions do not come with the necessary algebraic properties required for blinding and unblinding.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.