New answers tagged schnorr-signature
3
votes
Accepted
Random Oracle in Fiat-Shamir Transform (from Katz-Lindell Textbook)
Anything can be encoded as a bitstring, we just need to be a bit careful as to preserve the security of the random oracle.
Let $I\in S$. Then what is meant here by $H(I,m)$ is actually $H(\psi(I,m))$, ...
- 7,038
4
votes
Accepted
How are signature operations like hashing or concatenating with a message done when the input is an elliptic curve point?
The standard ways to encode elliptic curve points to byte strings are outlined in the SEC 1 document section 2.3.3
There is a choice to use a compressed or uncompressed form. In both cases the full 0-...
- 25.2k
Top 50 recent answers are included