Schnorr signature

Schnorr signature

In cryptography, a Schnorr signature is a digital signature produced by the Schnorr signature algorithm. Its security is based on the intractability of certain discrete logarithm problems. It is considered the simplest digital signature scheme to be provably secure in a random oracle model. It is efficient and generates short signatures. It is covered by US patent|4995082, which expired in February 2008.

Algorithm

Choosing parameters

*All users of the signature scheme agree on a group G with generator g of prime order q in which the discrete log problem is hard. Typically a Schnorr group is used.
*All users agree on a cryptographic hash function H.

Key generation

*Choose a private key x such that 0.
*The public key is y where "y" = "g"x.

igning

To sign a message M:
*Choose a random k such that 0
*Let r=g^k
*Let e=H(M||r)
*Let s=(k-xe) quadhbox{mod}quad q

The signature is the pair (e,s). Note that 0 le e < q and 0 le s < q; if a Schnorr group is used and q < 2^{160}, this means that the signature can fit into 40 bytes.

Verifying

*Let r_v=g^sy^e
*Let e_v=H(M||r_v)

If e_v=e then the signature is verified.

Public elements: G,g,q,y,s,e,r.Private elements: k,x.

"See also:" Topics in cryptography

References

* C.P. Schnorr, Efficient identification and signatures for smart cards, in G. Brassard, ed. Advances in Cryptology -- Crypto '89, 239-252, Springer-Verlag, 1990. Lecture Notes in Computer Science, nr 435
* Claus-Peter Schnorr, Efficient Signature Generation by Smart Cards, J. Cryptology 4(3), pp161&ndash;174 (1991) [http://www.mi.informatik.uni-frankfurt.de/research/papers/schnorr.smartcardsig.1991.ps (PS)] .


Wikimedia Foundation. 2010.

Игры ⚽ Нужно сделать НИР?

Look at other dictionaries:

  • Schnorr group — A Schnorr group is a large prime order subgroup of mathbb{Z}^* p, the multiplicative group of integers modulo p for some prime p. To generate such a group, generate p, q, r such that :p = qr + 1 with p, q prime. Then choose random h in the range… …   Wikipedia

  • Schnorr-Signatur — Die Schnorr Signatur ist ein 1989/91 vom deutschen Mathematikprofessor Claus Peter Schnorr entworfenes kryptographisches Schema für Digitale Signaturen. Es leitet sich aus der Schnorr Identifikation ab, indem wie bei der Fiat Shamir… …   Deutsch Wikipedia

  • Digital signature — This article is about secure cryptographic signatures. For simple signatures in digital form, see Electronic signature. A digital signature or digital signature scheme is a mathematical scheme for demonstrating the authenticity of a digital… …   Wikipedia

  • Digital Signature Standard — Der Digital Signature Algorithm (DSA) ist ein Standard der US Regierung für Digitale Signaturen. Er wurde vom National Institute of Standards and Technology (NIST) im August 1991 für die Verwendung in deren Digital Signature Standard (DSS)… …   Deutsch Wikipedia

  • Digital Signature Algorithm — Der Digital Signature Algorithm (DSA) ist ein Standard der US Regierung für Digitale Signaturen. Er wurde vom National Institute of Standards and Technology (NIST) im August 1991 für die Verwendung in deren Digital Signature Standard (DSS)… …   Deutsch Wikipedia

  • Digital Signature Algorithm — Le Digital Signature Algorithm, plus connu sous le sigle DSA, est un algorithme de signature numérique standardisé par le NIST aux États Unis, du temps où le RSA était encore breveté. Cet algorithme fait partie de la spécification DSS pour… …   Wikipédia en Français

  • Claus-Peter Schnorr — Claus Peter Schnorr. Claus Peter Schnorr (* 4. August 1943 in Völklingen bei Saarbrücken) ist ein deutscher Mathematiker und Informatiker. Leben Schnorr studierte von 1962 bis 1966 an der Universität Saarbrücken Ma …   Deutsch Wikipedia

  • Digital Signature Algorithm — The Digital Signature Algorithm (DSA) is a United States Federal Government standard or FIPS for digital signatures. It was proposed by the National Institute of Standards and Technology (NIST) in August 1991 for use in their Digital Signature… …   Wikipedia

  • Claus P. Schnorr — Claus Peter Schnorr C. P. Schorr at Oberwolfach, 1986. Born 4 August 1943 …   Wikipedia

  • Protocole d'authentification de schnorr — En cryptographie, le protocole d authentification de Schnorr est une signature numérique produite par l algorithme d authentification de Schnorr. Sa sécurité est basée sur l indertémination des problèmes du logarithme discret. Paramètres… …   Wikipédia en Français

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”