Reading here,I was confused in the proof of "A Multi-Signature Scheme based on Discrete Logarithms" proposed by authors.I felt strange to the technique(using array $T_0[]$$T_1[]$$T_2[]$ and state $alert$$bad$),can someone give me a straightforward explain of this proof(or some similar proofs of other schemes)?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.