Reading here,I was confused in the proof of "A Multi-Signature Scheme based on Discrete Logarithms" proposed by authors.I felt strange to the technique(using array $T_0[]$、$T_1[]$、$T_2[]$ and state $alert$、$bad$),can someone give me a straightforward explain of this proof(or some similar proofs of other schemes)?
-
$\begingroup$ This seems to differ from this version: cseweb.ucsd.edu/~mihir/papers/multisignatures-ccs.pdf maybe reading it may help? $\endgroup$– WeCanBeFriendsMay 31, 2019 at 22:59
-
$\begingroup$ That is full verson of the version you referenced, so this is the same $\endgroup$– LauraJun 2, 2019 at 2:18