1
$\begingroup$

In the section 3 (page 44) of the book "Post Quantum Cryptography", it says:

Then each one-time signature key must be generated twice, once for the MSS public key generation and once during the signing phase.

Also defined $\text{PRNG}$: $\text{Seed}_{\text{in}} \rightarrow (RAND, SEED_{\text{out}})$, where $\text{RAND}$ is a random number.

Finally, it describes an example of MSS + W-OTS. Here, $\text{SEEDOTS}_j$ is used to generate signature key $X_j = (x_{t-1},...,x_0)$ where $x_i$ are generated on $(x_i, \text{SEEDOTS}_j)=PRNG(\text{SEEDOTS}_j)$.

My question: How is possible generate the same key for public key generation and during the signing phase, for each one-time signature key, if $x_i$ is random (by definition of $\text{PRNG}$)?

$\endgroup$
  • $\begingroup$ Your post doesn't have the $\$$ symbols, and I can't quite tell where they should be. $\hspace{1.05 in}$ $\endgroup$ – user991 Jul 8 '13 at 0:33
  • $\begingroup$ @RickyDemer I edit my question $\endgroup$ – juaninf Jul 8 '13 at 0:43
1
$\begingroup$

Probably it's possible because they are using a deterministic pseudorandom random number generator (PRNG) to generate these values, as a deterministic function of some seed, which is remembered by the holder of the private key.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.