New answers tagged number-theory
0
votes
Accepted
Attempting to simplify Fiege-Fiat-Shamir Identification
I assume that step 4 of your protocol is to check that $r^2=wt_a\mod n$ otherwise the correctness is untrue.
If this is the case, your protocol allows an adversary to impersonate Alice with 100% ...
- 25.4k
3
votes
Accepted
Attack on Identification Scheme (from Katz-Lindell Textbook 3rd Ed., p. 483)
I'm not sure why the authors elected not to do this; your construction is completely valid. It also a good step towards understanding a broader principle: linear relations between unknown exponents ...
- 25.4k
Top 50 recent answers are included