Security reductions

[ciphergoth]

For the three or so cryptographers on my friends list:

The Goh-Jarecki-Katz-Wang DDH-based signature scheme not only has a tight reduction to the hardness of DDH - it also has a loose reduction to DL using the forking lemma in the same way as Schnorr. I mention this because it's currently my favourite scheme, and the authors didn't know about the reduction...

Comments

[cryptodragon.livejournal.com]

Thank you, I've just spent the last hour looking over that algorithm rather than sleeping. :)

[purplerabbits.livejournal.com]

I thought you said forking lemon there for a moment. Which would have made sense. Well, as much sense...

[just-becky.livejournal.com]

OOh I love it when you talk dirty! :-D

has a tight reduction to the hardness of DDH
Saucy!

[zwol.livejournal.com]

Could I have a reference to that algorithm, please? I am not finding it.

[strangerover.livejournal.com]

Damn, and I thought that was a start of a Mornington Crescent post...

[(Anonymous)]

Cute. You may want to write a short eprint note about this, or if you feel like it that's the kind of thing that could be a PKC or RSA paper. I expect others would be interested to see the reduction, too.

Saw this, and thought of you :)

[aster13.livejournal.com]

I'm probably just showing up how little i know about cryptography, here (which let's face it, could probably fit on the back of a stamp!) but, in case it's of interest:

http://blog.wired.com/27bstroke6/2007/03/cryptographer_s.html