[Taler] Clause Blind Schnorr Signatures

[Jeff Burdges]

There is a recent paper https://eprint.iacr.org/2019/877.pdf in section 5 of 
which the authors produce a secure blind Schnorr signature in the algebraic 
group model plus OMDL.  In essence, it opens parallel signing queries and the 
signer random selects which to finish, which sounds fairly amenable to Taler, 
except blind Schnorr still need three moves, while blind RSA and blind BLS only 
need two,

Jeff

signature.asc
Description: Message signed with OpenPGP