Is there any proof for ECDSA signature algorithm?

Cryptography Asked by sanket1729 on December 19, 2021

Related: Is there an interactive version of ECDSA signature protocol like the Schnorr identification protocol?

One Answer

As pointed out by @SEJPM, you can read more about security proofs for DSA/ECDSA family on this thread.

As for whether there exists an interactive protocol corresponding to DSA/ECDSA à la Schnorr identification/Schnorr signature, not that I am aware of. I would add that this is unlikely for two reasons:

  1. The (unfortunate) reason for coming up with DSA/ECDSA was to bypass the patent on Schnorr signatures. Therefore its design was supposed be different enough from Schnorr.
  2. If there were some kind of a sigma protocol then it is very likely that this would lead to a security proof (at least in the random-oracle model) as there exist standard methods to construct signatures from identification. Since we don't know a proof, one could say that there probably isn't an interactive protocol either (but this argument is very hand-wavy).

Answered by ckamath on December 19, 2021

Add your own answers!

Related Questions

Can I convert $F_{q^{12}}$ to $F_q$?

1  Asked on September 11, 2020 by user212942


Are the GPS coordinates a good source of entropy?

2  Asked on September 9, 2020 by cipherx


Ask a Question

Get help from others!

© 2022 All rights reserved. Sites we Love: PCI Database, MenuIva, UKBizDB, Menu Kuliner, Sharing RPP, SolveDir