On Fri, Nov 29, 2013 at 7:27 PM, Nick Mathewson <ni...@torproject.org> wrote:
>   Appendix A. Signature scheme with key blinding [KEYBLIND]
> ...
>   See [KEYBLIND-REFS] for an extensive discussion on this scheme and
>   possible alternatives. I've transcribed this from a description by
>   Tanja Lange at the end of the thread. [TODO: We'll want a proof for
>   this.]

A security proof for this scheme is available at:
https://www-users.cs.umn.edu/~hopper/basic-proof.pdf
(LaTeX sources at https://www-users.cs.umn.edu/~hopper/hs-identity-proof.git)

It would be fantastic to get comments/discussion from the tor-dev
community ahead of publishing this as a Tor Project tech report.

-- 
------------------------------------------------------------------------
Nicholas Hopper
Associate Professor, Computer Science & Engineering, University of Minnesota
Visiting Research Director, The Tor Project
------------------------------------------------------------------------
_______________________________________________
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Reply via email to