Is it possible to implement blind signatures with purely hash-based signature algorithms?
Any whitepapers, code samples, etc on the subject would be helpful.
Add a comment
|
2 Answers
$\begingroup$
$\endgroup$
1
It's impossible:
Impossibility of Blind Signatures From One-Way Permutations - Katz, Schroder, Yerukhimovich
answered Dec 31, 2017 at 12:32
-
$\begingroup$ Would this be inclusive of things like SPHINCS+? $\endgroup$– CoryGJan 1, 2018 at 2:51
$\begingroup$
$\endgroup$
Till today, there is no known construction for this. The problem is that standard hash functions do not come with the necessary algebraic properties required for blinding and unblinding.
