Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support |

#1
March 17th, 2011, 05:17 PM
 nandonachi
Contributing User

Join Date: Dec 2008
Posts: 127
Time spent in forums: 1 Day 6 h 49 m 50 sec
Reputation Power: 0
K key dependent upon previous values in el gamal signature

please explain how we can solve the following problem:

Suppose that Alice is using the ElGamal Signature scheme. In order to save time in generating the random numbers k that are used to sign messages, Alice chooses an initial random value k0, and then signs the ith message using the value ki = k0 + 2i (mod p) (therefore ki = ki-1 + 2 (mod p)) for all i 1).
Suppose that Bob observes two consecutive signed messages, say (xi, sign(xi)) and (xi+1, sign(xi+1)). Describe how Bob can compute Alice’s secret key, a, given this information, without solving an instance of the discrete logarithm problem. (Note that the value of i does not have to be known for the attack to succeed.)

__________________
CCNA,MTA
if u can't see the the bright side of your life,polish the dull side!!!

 Viewing: Dev Shed Forums > System Administration > Security and Cryptography > K key dependent upon previous values in el gamal signature