[tor-dev] [PATCH] torspec/rend-spec-ng: Link to proof of the keyblinding scheme.

[George Kadianakis <desnacked@xxxxxxxxxx>]

I attach a patch that adds a link to Nick Hopper's proof of the
keyblinding scheme in rend-spec-ng.txt.

Thanks!


From 2bc39a9721ed9639220b9c94c62d52cc5affd12b Mon Sep 17 00:00:00 2001
From: George Kadianakis <desnacked@xxxxxxxxxx>
Date: Mon, 6 Oct 2014 21:29:14 +0100
Subject: [PATCH] rend-spec-ng: Link to Nick Hopper's proof of the keyblinding
 scheme.

---
 proposals/224-rend-spec-ng.txt | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/proposals/224-rend-spec-ng.txt b/proposals/224-rend-spec-ng.txt
index 01c682a..ffef617 100644
--- a/proposals/224-rend-spec-ng.txt
+++ b/proposals/224-rend-spec-ng.txt
@@ -1599,6 +1599,9 @@ References:
         https://trac.torproject.org/projects/tor/ticket/8106
         https://lists.torproject.org/pipermail/tor-dev/2012-September/004026.html
 
+[KEYBLIND-PROOF]:
+        https://lists.torproject.org/pipermail/tor-dev/2013-December/005943.html
+
 [SHAREDRANDOM-REFS]:
         https://trac.torproject.org/projects/tor/ticket/8244
         https://lists.torproject.org/pipermail/tor-dev/2013-November/005847.html
@@ -1691,9 +1694,8 @@ Appendix A. Signature scheme with key blinding [KEYBLIND]
           = R + hash(R,A',M)A' )
 
   See [KEYBLIND-REFS] for an extensive discussion on this scheme and
-  possible alternatives. I've transcribed this from a description by
-  Tanja Lange at the end of the thread. [TODO: We'll want a proof for
-  this.]
+  possible alternatives. Also, see [KEYBLIND-PROOF] for a security
+  proof of this scheme.
 
   (To use this with Tor, set N = INT_8(period-number) | INT_8(Start of
   period in seconds since epoch).)
-- 
2.1.0

_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev