49 |
One-time signatures were originally proposed independently |
One-time signatures were originally proposed independently |
50 |
by [XXX] and [XXX]. Since then, numerous variations |
by [XXX] and [XXX]. Since then, numerous variations |
51 |
and improvements have been published [XXX]. |
and improvements have been published [XXX]. |
52 |
|
Despite their limitations, one-way signatures have |
53 |
|
attracted considerable interest because |
54 |
Despite the limitation to a small number of signatures |
their operation |
55 |
per public/private key pair, |
does not |
56 |
|
rely on |
|
one-time signatures have |
|
|
an important advantage: |
|
|
|
|
|
one-way functions generally do not rely on |
|
57 |
unproven number-theoretic assumptions, like the |
unproven number-theoretic assumptions, like the |
58 |
difficulty of factoring large integers [XXX]. In practice, |
difficulty of factoring large integers [XXX]. |
59 |
|
Also, in practice, |
60 |
a cryptographic hash function is used in most |
a cryptographic hash function is used in most |
61 |
signature schemes anyway to map messages to a |
signature schemes anyway to map messages to a |
62 |
fixed-length digest, which is then signed. As |
fixed-length digest, which is then signed. As |