As I understand the schnorr authentication protocol is an interactive protocol where a prover WLOG proves to a Verifier that he possesses the discrete log to some group element.

If we use the Fiat-shamir heuristic and turn this into a non-interactive protocol, then this becomes the schnorr signature scheme.

Is the following correct:

Since Schnorr signature scheme is a signature scheme, we would like it to be unforgable, non-repudiation, etc; all the properties of a signature scheme.

Since the Schnorr authentication protocol is an interactive protocol, we need it to be complete and sound.

Our Schnorr Signature scheme does not need to be sound or complete because it does not make sense for a signature scheme.

If the non-interactive version of the schnorr authentication protocol was not a signature scheme, then we would need it to be sound and complete.

  • 1
    $\begingroup$ This has been receiving close votes as unclear, but no hint is given how to fix the issue, maybe somebody can give a hint (next time?) $\endgroup$ – Maarten Bodewes Aug 28 '19 at 21:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.