1
$\begingroup$

In the section 3 (page 44) of the book "Post Quantum Cryptography", it says:

Then each one-time signature key must be generated twice, once for the MSS public key generation and once during the signing phase.

Also defined $\text{PRNG}$: $\text{Seed}_{\text{in}} \rightarrow (RAND, SEED_{\text{out}})$, where $\text{RAND}$ is a random number.

Finally, it describes an example of MSS + W-OTS. Here, $\text{SEEDOTS}_j$ is used to generate signature key $X_j = (x_{t-1},...,x_0)$ where $x_i$ are generated on $(x_i, \text{SEEDOTS}_j)=PRNG(\text{SEEDOTS}_j)$.

My question: How is possible generate the same key for public key generation and during the signing phase, for each one-time signature key, if $x_i$ is random (by definition of $\text{PRNG}$)?

Improve this question
$\endgroup$
2
  • $\begingroup$ Your post doesn't have the $\$$ symbols, and I can't quite tell where they should be. $\hspace{1.05 in}$ $\endgroup$
    – user991
    Jul 8, 2013 at 0:33
  • $\begingroup$ @RickyDemer I edit my question $\endgroup$
    – juaninf
    Jul 8, 2013 at 0:43

1 Answer 1

Reset to default
1
$\begingroup$

Probably it's possible because they are using a deterministic pseudorandom random number generator (PRNG) to generate these values, as a deterministic function of some seed, which is remembered by the holder of the private key.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.