138 |
scheme, and 2) a random oracle function. We generally assume |
scheme, and 2) a random oracle function. We generally assume |
139 |
that the random oracle is the same hash function (e.g. SHA-1) |
that the random oracle is the same hash function (e.g. SHA-1) |
140 |
as in the underlying signature scheme. Usually, this scheme |
as in the underlying signature scheme. Usually, this scheme |
141 |
will be a Merkle hash tree [XXX] of Merkle |
will be a Merkle hash tree [merkle80protocols]_ of Merkle |
142 |
one-time signatures [XXX]. Other choices such as BiBa [XXX] |
one-time signatures [merkle87digital]_. Other choices such as BiBa [XXX] |
143 |
are possible, but not evaluated in this article. |
are possible, but not evaluated in this article. |
144 |
|
|
145 |
The private key for this scheme is simply a private key |
The private key for this scheme is simply a private key |