On 01/03/2015 9:20 pm, "Ben Laurie" <<a href="mailto:ben@links.org">ben@links.org</a>> wrote: > > On 1 March 2015 at 12:33, Ben Harris <<a href="mailto:mail@bharr.is">mail@bharr.is</a>> wrote: > > On 01/03/2015 7:45 pm, "Ben Laurie" <<a href="mailto:ben@links.org">ben@links.org</a>> wrote: > >> > >> On 1 March 2015 at 07:24, Michael Hamburg <<a href="mailto:mike@shiftleft.org">mike@shiftleft.org</a>> wrote: > >> > client computers P^1/r = h^e, and uses the hash of that point as part of > >> > the > >> > secret key derivation. > Yeah, so now the client has h^e, but no-one else does - so what use is > that? I'm confused. Your private key is then a mapping of hash(h^e) or some similar construction.