[Taler] Blind Rabin

[Jeff Burdges]

I’ve now forgotten, but did we ever consider using blind Rabin signatures?

It's discussed is section 3.3 on page 7 of
https://www.math.uzh.ch/aa/fileadmin/user/davide/publikation/SignatureRabin11.pdf

It’s not exactly compatible with DJB’s Rabin-Williams signature variants from
https://cr.yp.to/sigs/rwtight-20080201.pdf
well see page 2 for the beginning of that discussion.

I think these blind Rabin signatures should've the fastest verification for any 
blind signature scheme, but the signature size looks like at least twice that 
of RSA, which I think poses some problem for Taler, so probably not 
advantageous in practice, and they require more careful mathematics for 
security arguments.

Jeff

signature.asc
Description: Message signed with OpenPGP