618 |
- biba: |
- biba: |
619 |
|
|
620 |
- Reyzin subset-resilient. The security requirement, |
- Reyzin subset-resilient. The security requirement, |
621 |
for a single signature, means that |
for a single signature signing 160 bits, this means that |
622 |
`$\\log t \ge {160-\log k \over k}$`. |
`$\\log t \ge {160-\log k \over k}$`. |
623 |
A suitable choise seems to be `$t=1024$`, `$k=24$` |
A suitable choise seems to be |
624 |
|
`$t=308$`, `$k=91$` |
625 |
|
|
626 |
|
- Reyzin pure. Here, we only need the ability to sign 160 bits, |
627 |
|
which we get at the cheapest (where sum of bits |
628 |
|
in signature plus public key is smallest, and |
629 |
|
with smallest `$t$` at |
630 |
|
`$t=168$`, `$k=69$` |
631 |
|
|
632 |
- alternatively, the Reyzin theoretical construction may be used, |
- alternatively, the Reyzin theoretical construction may be used, |
633 |
where the time spent is somewhat more but security depends |
where the time spent is somewhat more but security depends |