Skip to main content

New answers tagged

0 votes

Question of section 1.3 Intuition for Aborting in "Fiat-Shamir With Aborts: Applications to Lattice and Factoring-Based Signatures"

Yes, $sc+y$ is insecure in the full range. This is because inverting $AZ+TC$ to find a valid $Z$ is trivial using standard linear algerbra tools such as Gaussian elimination. However, it's very ...
DannyNiu's user avatar
  • 9,436
1 vote
Accepted

Forgeable and unconfidential short-term signature

I see a problem with the wording of this requirement: Private key safety (needed): It should be practically impossible to derive the private key from many plaintext & signature pairs. That's not ...
fgrieu's user avatar
  • 142k
0 votes

js-ethereum-cryptography secp256k1 signature difficulties

I ran into the same issue as you and I found another way around. You can use the JSON.stringify callback to map the stringify the same happens with ...
Christian Salazar Miño's user avatar
0 votes

Merge two multisignatures

I think it's what you need https://link.springer.com/chapter/10.1007/978-3-642-40041-4_27 《Full Domain Hash from (Leveled) Multilinear Maps and Identity-Based Aggregate Signatures》
Dastro Yang's user avatar
1 vote

Making signature immune to Colliding Signatures and other threats

This is only a partial answer. It mostly addresses the fact that the proposed solution doesn't work generically. This is done by exhibiting secure schemes so that their composition in the proposed isn'...
Marc Ilunga's user avatar
  • 3,338
0 votes

Can a Sigma protocol be transformed into a signature of knowledge through Fiat-Shamir transform?

We know we can get an identification scheme from a sigma protocol where the prover knows witness $w$ for the statement $x = wG$, where $G$ is the generator of some cyclic group wherein discrete-log is ...
Atonal's user avatar
  • 155
0 votes

ECDSA Signature R|S to ASN1 DER Encoding question

I stumbled upon this thread while searching for how to convert ASN1 (== DER) to R|S (== P1363) encoding in Java. I am not qualified to answer on the theory but I can provide a software engineer ...
N. Gimenez's user avatar
1 vote
Accepted

Multivariate Cryptography: What is the secret oil space in the MAYO signature scheme?

To quote Mayo's paper: To generate a key-pair, a user first chooses a random oilspace by sampling a uniformly random $o$-by-$(n−o)$ matrix $\mathbf{O}$, and letting $O$ be the rowspace of $(\mathbf{O}...
Lev's user avatar
  • 468
1 vote

SPHINCS+ signature calculation and FORS public key

FORS tree index and its leaf node index to be chosen for message signing are the same tree index and leaf index in layer 0 for FORS public key signing as Algorithm 20 in the document above uses the ...
poncho's user avatar
  • 148k

Top 50 recent answers are included