[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cryptography-randombit
Subject:    [cryptography] What's the state of the art in factorization?
From:       paul () ciphergoth ! org (Paul Crowley)
Date:       2010-04-24 6:20:34
Message-ID: 4BD28DB2.8050001 () ciphergoth ! org
[Download RAW message or body]

James A. Donald wrote:
> If you want shorter signatures, the proposed scheme does not
> beat the Boneh, Lynn and Shacham proposal  "Short Signatures
> from the Weil Pairing", which the Chevallier-Mames  paper
> mentions and cites.

Sure, but that depends on the existence of GDH groups, which seems a 
little less conservative than the assumption that DDH is hard in Z*_p or 
in for example a NIST elliptic curve.
-- 
   __
\/ o\ Paul Crowley
/\__/ www.ciphergoth.org

[prev in list] [next in list] [prev in thread] [next in thread]