[curves] EC ring signature schemes

David Leon Gil coruus at gmail.com
Mon Jun 16 07:02:57 PDT 2014

Is anyone aware of any implementation of EC ring signatures *not* using pairing-based crypto? (If not, does anyone have any good ideas on the strategy to pursue in, e.g., Ed25519?)

(I know that the original RST ("How to leak a secret") scheme has been shown insecure if public keys in the ring are been adversarially chosen. Though the citation is eluding me after several searches, I believe there is a scheme using ZAPs to fix this.)

- David

(PS If you are also on Messaging, apologies for the duplication; I mistakenly posted this there originally.)
Sent using alpine: an Alternatively Licensed Program for Internet News and Email
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/curves/attachments/20140616/59c78d0d/attachment.html>

More information about the Curves mailing list