Blind signatures with DSA/ECDSA?

2004-04-24 Thread An Metet
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Here is the blind DSA signature based on MacKenzie and Reiter, http://www.ece.cmu.edu/~reiter/papers/2001/CRYPTO.pdf, in graphical form. Recall that a DSA public key is p, q, g, y; private key x; signature on hash h is: Choose k < q r = g^k mod p mod

Re: Blind signatures with DSA/ECDSA?

2004-04-23 Thread privacy.at Anonymous Remailer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Often people ask about blind DSA signatures. There are many known variants on DSA signatures which allow for blinding, but blinding "plain" DSA signatures is not discussed much. Clearly, blinding DSA signatures is possible, through general purpose t