554 |
`$t=175$`, `$k=62$` |
`$t=175$`, `$k=62$` |
555 |
|
|
556 |
|
|
557 |
|
- Security not straightforward: |
558 |
|
There is a large number of hashes used, and a collision |
559 |
|
between any two could allow forging of signatures. |
560 |
|
birthday attacks, ... |
561 |
|
|
562 |
|
- Bleichenbacher-Maurer. |
563 |
|
To sign 160 bits, we need `$n=29$`. |
564 |
|
Signatures are 90 hashes |
565 |
|
|
566 |
|
Supporting multiple signatures is possible e.g. in BiBa, |
567 |
|
but inefficient. Merkle hash trees better |
568 |
|
|
569 |
Conclusion |
Conclusion |
570 |
========== |
========== |
571 |
|
|