[tor-commits] [torspec/master] rend-spec-ng: Link to Nick Hopper's proof of the keyblinding scheme.

[nickm@xxxxxxxxxxxxxx]

commit ec13d2e0c62bcfe6c982176196631c5a5ec1c471
Author: George Kadianakis <desnacked@xxxxxxxxxx>
Date:   Mon Oct 6 21:29:14 2014 +0100

    rend-spec-ng: Link to Nick Hopper's proof of the keyblinding scheme.
---
 proposals/224-rend-spec-ng.txt |    8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/proposals/224-rend-spec-ng.txt b/proposals/224-rend-spec-ng.txt
index 01c682a..ffef617 100644
--- a/proposals/224-rend-spec-ng.txt
+++ b/proposals/224-rend-spec-ng.txt
@@ -1599,6 +1599,9 @@ References:
         https://trac.torproject.org/projects/tor/ticket/8106
         https://lists.torproject.org/pipermail/tor-dev/2012-September/004026.html
 
+[KEYBLIND-PROOF]:
+        https://lists.torproject.org/pipermail/tor-dev/2013-December/005943.html
+
 [SHAREDRANDOM-REFS]:
         https://trac.torproject.org/projects/tor/ticket/8244
         https://lists.torproject.org/pipermail/tor-dev/2013-November/005847.html
@@ -1691,9 +1694,8 @@ Appendix A. Signature scheme with key blinding [KEYBLIND]
           = R + hash(R,A',M)A' )
 
   See [KEYBLIND-REFS] for an extensive discussion on this scheme and
-  possible alternatives. I've transcribed this from a description by
-  Tanja Lange at the end of the thread. [TODO: We'll want a proof for
-  this.]
+  possible alternatives. Also, see [KEYBLIND-PROOF] for a security
+  proof of this scheme.
 
   (To use this with Tor, set N = INT_8(period-number) | INT_8(Start of
   period in seconds since epoch).)

_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits