# Tag Info

Accepted

### Did digital signatures come from Zero Knowledge Proofs?

Did digital signatures actually come from Zero Knowledge Proofs? You are correct; the original proposals for digital signatures were not based on zero knowledge proofs. The idea of digital signatures ...
• 132k
Accepted

### Difference signature / asymmetric encryption (PQC)

The question's statement The signature algorithms are based on public-key encryption algorithms goes straight against accepted wisdom. Which is that signature and public-key encryption are separate ...
• 124k

### textbook RSA signature scheme security

There is no encryption or decryption here, since this scheme doesn't aim provide any confidentiality. This scheme aims to provide authenticity. The operations are signature (with the private key) and ...

### Difference signature / asymmetric encryption (PQC)

Like fgrieu said, not all public-key algorithms are based on bijective trapdoor permutations. If the standardization effort looked for a general-purpose bijective permutation, then we may very ...
• 6,621

### Is RSA-signing zero knowledge?

Firstly, we do not not know that any of the signature schemes is proof of holding the RSA secret key $d$. They would be proof of possession of an RSA decryption oracle/method corresponding to the ...
• 10.5k
Accepted

### ASN.1 integer question for DSA

The question has the following things correct: $(p,q,g)$ = (0x8df2…0291, 0xc773…915f, ...
• 124k

### Can one prove that a particular public key is part of an aggregated (MuSig) public key?

The MuSig (and MuSig2) key aggregation function, for the purpose of this question, is a hash function from multisets of public keys to public keys. Proving that a particular key is a member of an ...
Accepted

### RSASSA-PSS in TLS 1.2

If the client announces in the Signature Algorithm Extension that it supports one of the RSA-PSS: ...
• 136

### RSA small public exponent signature forgery - use part of the public key as cyphertext

It does appear to be a variation, or possibly an extension, on the BB'06 attack. As you know, with the BB'06 attack, we find a signature $s$ such that $s^3 \equiv m \pmod{2^\lambda}$, where $m$ is the ...
• 132k

### Size of signature

The size of digital signature (that is the size of the cryptogram output by the signature generation procedure) is in practice independent of the message signed and it's size, because what's signed is ...
• 124k