[messaging] Issues in Schnorr DLEQ proofs

[Jeff Burdges]

I’ve started some approachable notes on issues in current specs for Schnorr DLEQ proof protocols at https://github.com/w3f/ring-vrf/blob/master/papers/vrf_issues.tex

I have not yet checked if implementations of either V(X)Ed2551 or Privacy Pass correct the cofactor spec bugs.  I have not yet either added all the references for the protocols being commented on or ported over all the reverences for the non-cofactor concerns from https://github.com/w3f/schnorrkel/blob/master/src/vrf.rs either.

Jeff


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://moderncrypto.org/mail-archive/messaging/attachments/20200108/3b5ea9c1/attachment.sig>