Re: [GNUnet-developers] key exchanges [updated, resend]

[Jeff Burdges]

On Tue, 2015-08-25 at 13:24 +0200, Jeff Burdges wrote:
> Appears there is a much easier way to do all this.  
> 
> Idea 2 below effectively modifies ECDSA to sign a mathematical
> relationship between two numbers, as opposed to signing the number
> directly.  It's slightly opaque what that mathematical relationship is,
> but one must still take great care that the numbers are random and not
> themselves signed.
> 
> I now think this care with randomness alone suffices and one does not
> need to modify ECDSA at all.

Oops, this is wrong.  We actually do want that extra addition in ECDSA
so that Bob can fake the signature itself, not merely use a signature of
a mathematical relationship. 

It's probably still useful that I sent that email because the key
exchange algorithm is worth discussing.

Best, Jeff

signature.asc
Description: This is a digitally signed message part