Do we really need to mention post-quantum RSA? lol

This commit is contained in:
Jeffrey Burdges 2017-05-18 14:35:34 +02:00
parent c47745a1b3
commit 4637a1ea6b
No known key found for this signature in database
GPG Key ID: ABAC7FD1CC100A74

View File

@ -298,9 +298,8 @@ importance or even existence.
> scheme still seems to offer the best security/performance trade-off, > scheme still seems to offer the best security/performance trade-off,
> and we also value simplicity and extensive peer-review of the > and we also value simplicity and extensive peer-review of the
> cryptographic primitives used for production systems. So far, none > cryptographic primitives used for production systems. So far, none
> of the schemes compete. For example, Bernstein recently proposed an > of the schemes compete. In particular, the elliptic curve blind
> interesting PostQuantum blind-signature scheme, but the keys are too > signatures mostly require extra round trips.
> large to be useful in practice.
However, providing proofs of the statement to be signed is important, However, providing proofs of the statement to be signed is important,
and a potential attack on the presented scheme may illustrate this. The and a potential attack on the presented scheme may illustrate this. The