[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

*To*: Chein-hsinLiu <[email protected]>, [email protected]*Subject*: Re: Question about integrity of Blind Signature*From*: [email protected]*Date*: Sun, 31 Mar 1996 04:45:39 -0800*Sender*: [email protected]

At 11:51 PM 3/31/96 +0800, Chein-hsinLiu wrote: > Hi! >I have some question about ecash protocol. In ecash protocol, we represent >money by a sequence number which is signed by bank. And for privacy, we >use blind signature. But when we send bank a pesudo sequence number-- >X*PK(r) (X:sequence number we want, r :random number to cheat bank) >then we can get SK(X*PK(r)) from bank, and get money by SK(X*PK(r))/r=SK(X). >But if we divide SK(X*PK(r)) with r', we can get another money? It confuses >me. How does it preserve the integrity of the money, and let people divide >r on the SK(X*PK(r)) ? The sequence number is not a sequence number, nor is it just any random number. It is a random number of some special form, so that the chance that the "other money" will be of this special form is remote. For example one might demand that every second hex digit was the number 7, and the other digits were random. When we divide a valid money number by r, we will not get another valid money number. > It confuses me very long time. Thanks for any help! > Chein-hsin Liu 4/1/96 > > --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | [email protected]

- Prev by Date:
**Re: What backs up digital money?** - Next by Date:
**Re: [NOISE] Cable-TV-Piracy-Punks** - Prev by thread:
**Question about integrity of Blind Signature** - Next by thread:
**Chaumian ecash without RSA** - Index(es):