/[gzz]/manuscripts/Sigs/article.rst
ViewVC logotype

Diff of /manuscripts/Sigs/article.rst

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1.133 by tjl, Mon May 19 20:38:50 2003 UTC revision 1.134 by benja, Mon May 19 20:40:43 2003 UTC
# Line 179  underlying scheme, plus the accesses to Line 179  underlying scheme, plus the accesses to
179  The time to verify is also equal to the time of verifying `$N$`  The time to verify is also equal to the time of verifying `$N$`
180  signatures in the underlying scheme.  signatures in the underlying scheme.
181    
182    *Security.* Assume that the underlying signature scheme
183    is resistant against a `$q$`-time chosen message attack.
184    Within the tree, each private key is only used to sign
185    `$q$` messages: the public keys corresponding to the
186    new private keys the random oracle determines from
187    the old private key. This part of the system is thus
188    secure against any kind of chosen message attack.
189    
190    At the leaves, the scheme is secure if the same
191    leaf key is not used to sign more than `$q$` messages;
192    security thus depends on the algorithm for choosing `$x$`.
193    
194    
195  Full Digital Signature Feature Set without Trapdoor Functions  Full Digital Signature Feature Set without Trapdoor Functions
196  =============================================================  =============================================================
197    
# Line 208  linear with `$N$` and the time to sign g Line 221  linear with `$N$` and the time to sign g
221  Table [ref-tabtradeoff]_ shows the tradeoff in the characteristics  Table [ref-tabtradeoff]_ shows the tradeoff in the characteristics
222  of the derived schemes.  of the derived schemes.
223    
   
224  ..  raw:: latex  ..  raw:: latex
225    
226      \begin{table*}      \begin{table*}

Legend:
Removed from v.1.133  
changed lines
  Added in v.1.134

savannah-hackers-public@gnu.org
ViewVC Help
Powered by ViewVC 1.1.26