Re: [Cfrg] Request For Opinions

["Anton Stiglic" <astiglic@okiok.com>]

"David Wagner" <daw@mozart.cs.berkeley.edu> wrote in message
b961s3$g9j$1@abraham.cs.berkeley.edu">news:b961s3$g9j$1@abraham.cs.berkeley.edu...

[...]
> Notice that DSA allows precomputation.  You can do most of the
> work of the signature ahead of time, before you know the message;
> basically, you create a "blank check" that can later be filled in
> with the message, and most of the work comes in creating the blank
> check (filling in the message is fast).  If you have stretches of
> quiet time punctuated by bursts of activity, you might be able to
> use the idle time for precomputation.


Is there not a patent on this technique (by Micali maybe)? I remember
something about a patent on DSA precomputation, but I don't remember
the details...

--Anton

_______________________________________________
Cfrg mailing list
Cfrg@ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg