diff options
Diffstat (limited to 'spec/rend-spec-v3/signature-scheme-with-key-blinding-keyblind.md')
| -rw-r--r-- | spec/rend-spec-v3/signature-scheme-with-key-blinding-keyblind.md | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/spec/rend-spec-v3/signature-scheme-with-key-blinding-keyblind.md b/spec/rend-spec-v3/signature-scheme-with-key-blinding-keyblind.md index f4f950d..d0393dd 100644 --- a/spec/rend-spec-v3/signature-scheme-with-key-blinding-keyblind.md +++ b/spec/rend-spec-v3/signature-scheme-with-key-blinding-keyblind.md @@ -1,7 +1,9 @@ <a id="rend-spec-v3.txt-A"></a> + # Appendix A: Signature scheme with key blinding [KEYBLIND] <a id="rend-spec-v3.txt-A.1"></a> + ## Key derivation overview As described in [IMD:DIST] and [SUBCRED] above, we require a "key @@ -34,6 +36,7 @@ There is a master keypair (sk, pk). ``` <a id="rend-spec-v3.txt-A.2"></a> + ## Tor's key derivation scheme We propose the following scheme for key blinding, based on Ed25519. @@ -99,4 +102,3 @@ Verifying the signature: Check whether SB = R+hash(R,A',M)A'. See [KEYBLIND-REFS] for an extensive discussion on this scheme and possible alternatives. Also, see [KEYBLIND-PROOF] for a security proof of this scheme. - |