Tim Ruffing [ARCHIVE] on Nostr: 📅 Original date posted:2018-07-08 📝 Original message:Hi Erik, On Sun, ...
📅 Original date posted:2018-07-08
📝 Original message:Hi Erik,
On Sun, 2018-07-08 at 10:19 -0400, Erik Aronesty via bitcoin-dev wrote:
> Consider changing the "e" term in the schnorr algorithm to hash of
> message (elligator style) to the power of r, rather than using
> concatenation.
How do you compute s = x*e if e is an element of group G?
(Similar question: How do you verify if e is element of G?)
Are you aware of
http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps ?
This is a threshold signature scheme for Schnorr signatures, so what
you want is possible already with Schnorr signatures.
Best,
Tim
Published at
2023-06-07 18:13:40Event JSON
{
"id": "05774d31551ccb9d0f6a8484235d8c004034837196190bc7b3ce4bfa7748143e",
"pubkey": "c6d7a400897460d9a2c07bbad58731b6d04267edd75af42af45f471b04581ec2",
"created_at": 1686161620,
"kind": 1,
"tags": [
[
"e",
"5913947cd80c78b94322af07aff87080ecda6ad2abd7e1bd4a8b9634dfe27fca",
"",
"root"
],
[
"e",
"87b8574bb7b580653b116fa785f9b04b49d3e4152e168eed47d8e280eb700010",
"",
"reply"
],
[
"p",
"22944ce1e29904e3826d25013a614e4665693ec514003efacc1b7586e8e5d0aa"
]
],
"content": "📅 Original date posted:2018-07-08\n📝 Original message:Hi Erik,\n\nOn Sun, 2018-07-08 at 10:19 -0400, Erik Aronesty via bitcoin-dev wrote:\n\u003e Consider changing the \"e\" term in the schnorr algorithm to hash of\n\u003e message (elligator style) to the power of r, rather than using\n\u003e concatenation. \n\nHow do you compute s = x*e if e is an element of group G?\n(Similar question: How do you verify if e is element of G?)\n\nAre you aware of \n http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps ?\nThis is a threshold signature scheme for Schnorr signatures, so what\nyou want is possible already with Schnorr signatures.\n\nBest,\nTim",
"sig": "9a04dd760c063efab32732f7167502e119617838bad0f0812353a51d916652c914d23e09140d78831d3fb222f21d369d67f44223fdd6096a628481d28e46b4c4"
}